An information security manager routinely monitored the Web surfing among her company's employees. She discovered that many employees were visiting the "sinful six" Web sites. She then prepared a list of the employees and their surfing histories and gave the list to management. Some managers punished their employees. Some employees, in turn, objected to the monitoring, claiming that they should have a right to privacy.
a. Is monitoring of Web surfing by managers ethical? (It is legal.) Support your answer.
b. Is employee Web surfing on the "sinful six" ethical? Support your answer
c. Is the security manager's submission of the list of abusers to management ethical? Why or why not?
d. Is punishing the abuses ethical? Why or why not? If yes, then what types of punishment are acceptable?
e. What should the company do in order to rectify the situation?