As the IoT (Internet of Things) grows, and users access corporate data with personal devices, companies are stuck balancing the ethical line between security with privacy. In regards to MDM systems and BYOD policies, answer the following questions:
Is it OK to read employees’ e-mail as a security measure to ensure that sensitive company information isn’t being disclosed?
Should you have access to those emails and files on a personal device that is accessing the company data via a 3rd party app (i.e. Outlook Mobile, or iOS default mail program)?
If you do read employees’ e-mail, should you disclose that policy to them? Before or after the fact?
Is it OK to read the documents and look at the graphics files that are stored on users’ computers or in their directories on the file server? On their mobile device?
Discussion 3-
The use of encryption can have adverse effects on incident response and incident investigations; however, from a security standpoint, encryption is a major component in network confidentiality. Present your argument for or against an “universal key” which would allow investigators the ability to decrypt data for an investigation. State your position and back-up your stance with 5 or 6 sentences supporting your stance from information you found in related cases or arguments made in online publications.
Sample Solution
