I think we can use the CIA Triad + Policy when talking about ethical issues with regards to storing electronic information about individuals.
Confidentiality. We have to ensure that individuals who are entrusted with storing personal data are keeping that data private. Unauthorized access – or even selling that data to the highest bidder – is a major threat. Organizations will pay top dollar for private data in order to sell a consumer any sort of widget. While that may not be unauthorized access because most of the time we sign our data away, a la Facebook, smaller companies may sell your data to larger ones. I think the prospect of confidentiality is the prime example of an ethical issue.
Integrity. People need to know their personal data is not being altered in any way. In the current environment, malicious actors are using AI to create “deep fakes” and altering personal data in a way to make people look different than they actually are. Ethical issues with credit card fraud, bank fraud, and other monetary crimes are prime examples of maintaining integrity of personal information.
Availability. If my personal data is being stored any place, I need to be able to have access to it. I think of health information in this case. Being able to see what data everyone else sees to ensure with privacy and integrity is still there is important.
Lastly, I say policy. Ethical standards of policy are important when it comes to storing information of a personal nature. If an individual is entrusted with a person’s bank, health, or other private data, there is an ethical obligation to have a policy to protect it.
I’ll talk a little about the cybersecurity risks in Bahrain versus the United States. I’ve spent a lot of time in this country as part of the US Navy, so I’m rather familiar with its military and security apparatus. With something like cybersecurity, it treated like most other security issues. The government controls the majority of cybersecurity. The National Cybersecurity Center is mandated by the royal family to provide oversight within the Kingdom to protect private and public entities from threats. This is different than the United States where most private companies are on their own with regards to cyber threats. However, I will say many of these types of programs are under-trained and under-funded in Bahrain. They provide some rudimentary training but the capability far underweighs the capacity.<\/p>\n","protected":false},"excerpt":{"rendered":"
I think we can use the CIA Triad + Policy when talking about ethical issues with regards to storing electronic information about individuals. Confidentiality. We have to ensure that individuals who are entrusted with storing personal data are keeping that data private. Unauthorized access – or even selling that data to the highest bidder –… <\/p>\n