Cybersecurity Ethics // CIS2253

CIS2253 // The Warehouse Divergent Hub

CIS2253

Cybersecurity Ethics

Where the security professional's job stops being technical and starts being moral.

4

Weeks

10

Modules

8

Labs

NIST CSF

Anchor

Warehouse Status: Course Progress

Loading...

Decision Path

1

Cyberethics & The Security Professional

WEEK 1 // SPINELLO Ch. 1-2 + NIST CSF

Obj 1 Obj 2 3 modules + 3 activities

▼

Week 1 Progress 0 / 6

FOUNDATION // INTERNET, PROFESSIONAL ROLE, FRAMEWORK

Spinello Chapter 1 sets the ethical stakes of cyberspace. Chapter 2 names the security professional's organizational role. NIST CSF — ID.BE, ID.GV, PR.AT, PR.IP — anchors the rest of the course. By the end of Week 1, you have a vocabulary for what we will be debating for the next three weeks.

Modules

Cyberethics Overview

Spinello Ch. 1 — The Internet, ethical values, and why cyberspace breaks ordinary moral intuition.

The Security Professional's Role

Spinello Ch. 2 (security-professional lens) — Organizational role and professional codes (ASIS, ISACA, GIAC, Ethics FIRST). Trust asymmetry.

NIST Cybersecurity Framework — The Course Anchor

ID.BE, ID.GV, PR.AT, PR.IP — the four CSF subcategories this course maps to. Functions, categories, applied judgment.

Activities

Lab: The Governance Gap

EDT — Mid-audit, a security analyst discovers a governance gap leadership has avoided for two years.

5-phase EDT CSE-L02

Lab: The Awareness Deluge

EDT — PR.AT awareness program flags every employee. The signal-to-noise ratio just collapsed.

5-phase EDT CSE-W1

Cyberethics, security professional role, NIST CSF — client-graded. 70% to pass.

2

Governance, Speech, and Property

WEEK 2 // SPINELLO Ch. 2-4

Obj 3 Obj 4 3 modules + 4 activities

▼

Week 2 Progress 0 / 7

RIGHTS // GOVERNANCE, SPEECH, IP

Who governs cyberspace, who speaks in it, who owns what runs through it. Spinello's middle chapters trace the legal and ethical scaffolding around platforms, content moderation, and the contested digital property line.

Modules

Cyberspace Governance & Regulation

Spinello Ch. 2 (governance lens) — ICANN, multistakeholder model, jurisdictional fights, the regulated firm.

Free Speech in Cyberspace

Spinello Ch. 3 — First Amendment, CDA Section 230, content moderation, foreign election interference.

Intellectual Property in Cyberspace

Spinello Ch. 4 — Copyright, DMCA, security research, fair use, trade secrets in the digital age.

Activities

Lab: The Takedown

EDT — Section 230. Platform must decide whether to remove legal-but-harmful content during a foreign election.

5-phase EDT CSE-L04

Lab: The Disclosure

EDT — DMCA. Researcher finds a critical vuln; vendor threatens DMCA litigation if it's published.

5-phase EDT CSE-W2

Governance, free speech, IP — client-graded. 70% to pass.

Client-graded CSE-MID

Weeks 1-2. Server-graded. 25% of course grade.

3

Privacy & The Moral Obligation

WEEK 3 // SPINELLO Ch. 5-6

Obj 5 Obj 6 2 modules + 3 activities

▼

Week 3 Progress 0 / 5

PRIVACY // CYBERCRIME // MORAL OBLIGATION

The defending side of the equation. Privacy as a contested right, cybercrime as a moral failure, and Spinello's argument that cybersecurity is not a technical job but a moral obligation. The week the stakes get personal.

Modules

Privacy Rights in Cyberspace

Spinello Ch. 5 — Fourth Amendment, ECPA, GDPR, breach notification, contextual integrity.

Cybercrime & Cybersecurity as Moral Obligation

Spinello Ch. 6 — Crime actors, hack-back debate, the moral weight of defending what you cannot personally see.

Activities

Lab: The 72 Hours

EDT — Breach discovered. Legal 72-hour clock vs. the ethical "tell users now" pressure.

5-phase EDT CSE-L06

EDT — Company asks the security team to retaliate against a known APT. Legal? Ethical? Effective?

5-phase EDT CSE-W3

Privacy, cybercrime, moral obligation — client-graded. 70% to pass.

4

Solarium & The Capstone

WEEK 4 // SOLARIUM COMMISSION + SYNTHESIS

Obj 7 Obj 8 2 modules + 4 activities

▼

Week 4 Progress 0 / 6

SOLARIUM // SYNTHESIS // FINAL

The Cyberspace Solarium Commission's "layered cyber deterrence" doctrine asks the security profession to defend forward, partner publicly with the private sector, and accept ethical compromises that the original codes never anticipated. Then the capstone: take what you have learned and walk it back into your own profession.

Modules

The Cyberspace Solarium Commission

2020 report, layered cyber deterrence, defend forward, public-private cooperation — and the new ethical questions it raises.

Capstone Synthesis

Four weeks of cyberethics in one frame. The decisions you'll actually face after the syllabus is gone.

Activities

Lab: Defend Forward

EDT — Government asks the firm to plant beacons in adversary networks under the Solarium doctrine. The line is somewhere.

5-phase EDT CSE-L08

Lab: The Backdoor

EDT — Backdoor in critical client system. Client refuses to disclose. Your professional code says otherwise.

5-phase EDT CSE-W4

Solarium, capstone synthesis — client-graded. 70% to pass.

Client-graded CSE-FINAL

Comprehensive — all four weeks. Server-graded. 25% of course grade.

Course Objectives

Discuss the intersection of Internet use and ethical values (Spinello Ch. 1).
Consider regulation and governance of cyberspace and the security professional's organizational role (Spinello Ch. 2).
Discuss free speech and censorship in cyberspace (Spinello Ch. 3).
Categorize intellectual property concerns and rights in cyberspace (Spinello Ch. 4).
Understand privacy rights in cyberspace (Spinello Ch. 5).
Define and discuss cybercrime, crime actors, and cybersecurity as a moral obligation (Spinello Ch. 6).
Review and discuss ethical issues presented in the US Cyberspace Solarium Commission's current work.
Participate in case studies (EDT labs) that probe cyberethical issues affecting public and private organizations.
Map course content to NIST CSF Functions: ID.BE, ID.GV, PR.AT, PR.IP.