A former Security officer BK, of Equae Security Agency (ESA), leaked classified documents that revealed extensive global surveillance programs operated by the ESA. The leaked information included details about the bulk c

CS Professional · Secretarial Audit, Compliance Management and Due Diligence · PYQS · June 2024
A former Security officer BK, of Equae Security Agency (ESA), leaked classified documents that revealed extensive global surveillance programs operated by the ESA. The leaked information included details about the bulk collection of phone records and internet communications. BK's actions raised significant legal and ethical questions surrounding government surveillance and the protection of individual privacy. The case prompted global debates on the balance between clients security interests and the right to privacy. BK faced charges for unauthorized disclosure of classified information, and henceforth ESA wants to be extra careful. What steps ESA should adopt for protecting and dealing with the confidential information in future? Explain also "written confidentiality".

Answer & Explanation:

Written Confidentiality: For every business/organization it is important to have a written confidentiality describing both the type of information considered confidential and the procedures employees must follow for protecting confidential information and dealing with the confidential information. However, ESA (Company), may adopt the following procedures for protecting confidential information: All confidential documents should be stored in locked file cabinets or rooms accessible only to those who are authorized. All electronic confidential information should be protected via firewalls, encryption and passwords. Employees should clear their desks of any confidential information before going home at the end of the day. Employees should refrain from leaving confidential information visible on their computer monitors when they leave their work stations. All confidential information, whether contained on written documents or electronically, should be marked as 'confidential'. All confidential information should be disposed of properly (e.g., employees should not print out a confidential document and then throw it away without shredding it first.) Employees should refrain from discussing confidential information in public places. Employees should avoid using e-mail to transmit certain sensitive or controversial information. Limit the acquisition of confidential client data (e.g., social security numbers, bank accounts, or driver's license numbers) unless it is integral to the business transaction and restrict access on a 'need-to-know' basis. Before disposing of an old computer, use software programs to wipe out the data contained on the computer or have the hard drive destroyed.

Topics: Confidentiality and Data Protection

Open in Interactive Practice Hub · Full Practice Hub · Chapter Weightage · More in this subject

Related Questions in this Topic