This assessment is aligned with the following learning objectives:

• identify system security threats and risk mitigation strategies.
• discuss privacy and ethics issues related to information systems.

With all the recent high-profile problems with intrusions into organizational databases and its potential impact on confidentiality, it is clear that privacy and security laws with appropriate enforcement need to be updated. Keeping these items in mind:

Part A: Cite specific rules/ guidelines within the law regarding information security that are subject to compliance by organizations. (3%)