How should markets, businesses, groups, and individuals be regulated or limited differently in the face of diminishing state power and the intelligification (Verbeek, p217) and networking of the material world?
It’s a tough question honestly, as I have conflicting feelings about this. I think one of the best things state rights gave to cybersecurity was the differences in standards of security, which caused natural evolution of the practice and allowed for new schools of thoughts to be formed, be they from either the failures or the successes of other systems. With all the power going to the federal government, the idea stands that it is possible there will be a singular way to regulate all manners of life in that way. In my opinion, there also needs to be new, stricter policies that deal with data collection. As it stands, every few weeks massive data breaches occur that leave people high and dry with their credit card information and status exposed to the world. Verbeek talked a lot about Google Glass, a now defunct product, and how simply glancing at someone would be enough to do a reverse face tracking search on the internet. It seems useful to utilize against criminals, but you could also potentially utilize something like this to frame people, by making them appear to be places where they were not actually. Doorbells and the like that record people who walk up to your house seem fine, but having cameras in every room of the house starts to feel intrusive. In short, less regulation for businesses so that more evolution occurs for cybersecurity, more regulation for data collection.
How has cyber technology created opportunities for workplace deviance?
Workplace deviance is defined as behaviors that violate organizational norms, in doing so threatening the well-being of the organization and the employees within it. Cyber Technology could increase white-collar crimes within the workplace. White-collar crimes are known as frauds that are committed by business and government professionals. An instance of this is someone in the company committing money laundering by hiding the wealth for themselves. Since cybertechnology has been advancing, it gives more of an opportunity for the increase of white-collar crimes to be committed. The person could hide in anonymity, so this makes it hard to find the perpetrator which could make the whole company go down for a crime one person committed.
You are the CISO for a publicly traded company. What protections would you implement to ensure availability of your systems (and why)?
The number one thing I would implement for availability on systems is two factor authentication, absolutely. I find it disturbing sometimes that someone in China, or using a proxy from there, was trying to gain access into one of my accounts, but reassuring to know that because it was two factor authenticated, there wasn’t any real way they could have gained entry. This is just a security measure, but for true availability, I would implement lots of servers as a means to cater to everyone’s requests and applications that are run. In a publicly traded company, you’ll have lots of users and curious spectators looking at your apps and websites, so it’s very important that you have the resources to tend to all of them. Maybe I would utilize some sort of generator system to keep up the servers when things go bad at the power stations. This might seem like an odd thing, but where I live there have been numerous power outages within the last few months, these things can happen to anyone.
Leave a Reply