Law and Ethics

United States has led the development and implementation of Information Security Legislation to prevent misuse and exploitation of information and information technology.

General Computer Crime Laws:

Computer Fraud and Abuse (CFA) Act of 1986 is the law for many computer related federal laws and enforcement efforts. National Information Infrastructure Protection Act has been amended in October 1996 to CFA. Punishment for offenses prosecuted under this statute varies from fines to imprisonment for up to 20 years.

CFA ACT further modified by the USA PATRIOT (United and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism) ACT of 2001. Which is enacted in 2001 as a mechanism to provide the United States with a means to investigate and respond to the 9/11 attacks on New York World Trade Center.

Electronic Communications Privacy Act (ECPA) of 1986: is a collection of statutes that regulates the interception of wire, electronic, and oral communications. There statutes are frequently referred to as the federal wiretapping acts.

·         Interception and disclosure of wire, oral, or electronic communications

·         Manufacture, distribution, possession, and advertising of wire, oral, or electronic communication intercepting devices.

·         Confiscation of wire, oral, or electronic communication intercepting devices.

·         Evidentiary use of intercepted wire or oral communications

·         Authorization for interception of wire, oral or electronic communications.

·         Authorization for disclosure and use of intercepted wire, oral, or electronic communications.

·          

Source: Management of Information Security by Whitman and Mattord.