Ethical Implications and Cybersecurity Risks Study Guide
1. Ethical Considerations
Ethical principles guide the acceptable and responsible conduct of professionals and the
design of secure systems.
General Cybersecurity Ethics
Topic Core Ethical Duty Rationale
Respecting an individual's Requires data minimization—only
Privacy right to control their collecting essential information—and
personal data. avoiding unnecessary surveillance.
Beyond legal compliance (GDPR,
Implementing strong
Data HIPAA), there is an ethical
safeguards to protect data
Protection obligation to maintain
from breaches.
confidentiality.
Reporting vulnerabilities Allows the entity time to patch,
Responsible
privately to the vendor protecting the public while
Disclosure
before public release. acknowledging the discovery.
Digital Forensics Ethics
Topic Core Ethical Duty Rationale
Ensuring digital evidence Maintained through
remains unaltered from cryptographic hashing and
Data Integrity
collection to final write blockers. Essential for
presentation. legal admissibility.
The examiner acts as an unbiased
Maintaining objectivity,
Witness expert, presenting facts truthfully
impartiality, and
Responsibilities regardless of the investigation's
transparency.
outcome.
Responsible AI (RAI) Principles
Building Responsible AI Models ensures AI systems are developed and deployed safely,
fairly, and reliably.
Principle Relevance to Cybersecurity
Models (e.g., UEBA) must be free from bias to avoid
Fairness & Bias
unfairly flagging certain groups' legitimate activity as
Mitigation
malicious.
Establishing clear human ownership and oversight for all
Accountability AI-driven decisions. A human must be responsible for
system failures.
Security teams need to understand why an AI flagged an
Transparency &
event (e.g., as malicious) to enable auditing and effective
Explainability (XAI)
human intervention.
2. Cybersecurity and Operational Risks
Risks are potential hazards that exploit vulnerabilities, leading to loss or damage.
Operational and Human-Centric Risks
Risk Description Mitigation Focus
Accidental mistakes by staff Training, awareness
Human Error (e.g., clicking phishing links, programs, and strong
misdirected data). process adherence.
Incorrect setup of cloud
Enforcing Infrastructure as
resources (e.g., public storage
Misconfiguration Code (IaC) and automated
buckets), firewalls, or
compliance checks.
applications.
Current or former personnel
Principle of Least Privilege
misusing legitimate access for
Insider Threat and continuous User
malicious or negligent data
Behavior Analytics (UBA).
exposure.
Digital Forensics Risks
Risk Description Mitigation Focus
Evidence being compromised, Secure evidence storage and
Data Breaches
lost, or altered while in the care strict Chain of Custody
and Tampering
of the forensics team. documentation.
AI/ML Deployment Risks
Risk Description Related Ethical Principle
Techniques to intentionally mislead Directly compromises the
the ML model using crafted inputs Security and Reliability
(adversarial examples). of the AI system.
Poisoning Attack: Attacker injects
corrupted data into the training set, Violates Data Integrity
Adversarial causing the model to learn flawed during model training.
Attacks patterns.
Evasion Attack: Attacker slightly
modifies malicious traffic at runtime
Leads to an immediate
to make the deployed model (e.g.,
security bypass.
IDS) classify it as benign (false
negative).
Violates Human
Over-trusting the AI system, leading
Reliance on Oversight, making the
human analysts to neglect manual
Automation system vulnerable to
review and critical thinking.
failures like Model Drift.