An information security manager routinely monitored the Web surfing among her company’s employees. She discovered that many employees were visiting the “sinful six” Web sites. (Note: The sinful six are Web sites with material related to pornography, gambling, hate, illegal activities, tastelessness, and violence.) She then prepared a list of the employees and their surfing histories and gave the list to management. Some managers punished their employees. Some employees, in turn, objected to the monitoring, claiming that they should have a right to privacy.

a. Is monitoring of Web surfing by managers ethical?

(It is legal.) Support your answer.

b. Is employee Web surfing on the “sinful six” ethical?

Support your answer.

c. Is the security manager’s submission of the list of abusers to management ethical? Why or why not?

d. Is punishing the abusers ethical? Why or why not? If yes, then what types of punishment are acceptable?

e. What should the company do in order to rectify the situation?