When it comes to storing the personal information of others ethical issues can arise.  Unauthorized users can gain access, authorized users can handle information poorly, mistakes on the integrity of information can occur, and companies/individuals could store irrelevant information. These are all problems that cyber security professionals probably work tirelessly to prevent. Unauthorized users are individuals who are not supposed to see any information. Oftentimes, authorized users are hackers. They steal personal information like credit card numbers, social security numbers, names, addresses. The loss of this information can be devastating to those who fall victim to hackers and their schemes. It is completely unethical yet there is probably nothing we can do to make hackers stop their devious ways, but internet users can be more diligent about protecting their information. Individuals should always be up to date on the latest scams and learn how to add extra security.

            Another ethical issue could involve an authorized user who works for companies that store other’s personal information. I can imagine not every company hires the best workers who have the greatest intentions. Someone can have a clean record and pass all background checks, but still turn out to be a rotten egg when given the opportunity. The misuse of personal information amongst security professionals has got to be highly unethical. Integrity in the cyber security world refers to how accurate information is. I am sure there have been times where information was entered very inaccurately by workers. This could be devastating especially in the medical field. Doctors could accidentally give a patient a drug that they are allergic to if it was mistakenly left out of their records. It is so unethical (whether done on purpose or by accident) to make information lack integrity.

            Lastly, companies could store information that they should not have in the first place. This could probably occur if a company has not set guidelines or followed a framework. Miscommunication across workers in a work setting could be so damaging, and if a company collects information, they do not even need it is highly unethical in my opinion.

I used this website cited below to reference what the prompt meant and to get inspiration:

An ethical approach to data privacy protection. ISACA. (n.d.). Retrieved September 20, 2021, from https://www.isaca.org/resources/isaca-journal/issues/2016/volume-6/an-ethical-approach-to-data-privacy-protection.