Introduction

PHIL 355E helped me understand the ethical side of cybersecurity and how the decisions people make in this field can affect others. Before taking this course, I mostly thought ethics came down to knowing what was legal and what was illegal. Throughout the course, I learned that something can be legal or technically possible and still raise serious ethical concerns.

We covered topics such as privacy, corporate responsibility, professional conduct, whistleblowing, ethical hacking, information warfare, and cyberwarfare. These topics helped me understand that cybersecurity professionals have responsibilities beyond protecting computers and networks. They also have to think about people’s rights, the consequences of their actions, and how their decisions affect individuals and society.

Cybersecurity Ethics Reflection

Privacy and Data Collection

One of the topics that changed my thinking was privacy, especially the Google Street View case. At first, I mainly saw Street View as a useful technology that allowed people to view streets and locations online. I did not think much about the privacy concerns because the images were collected from public places.

After studying the case, I started thinking more about the difference between something being visible in public and a company having the ability to record, store, and share that information on a much larger scale. Just because information can be collected does not automatically mean it should be.

This helped me understand how ethical theories, such as virtue ethics, can be used to evaluate the decisions companies make. Instead of only asking whether a company is legally allowed to collect certain information, it is also important to ask whether the company is acting responsibly and respecting people’s privacy.

My biggest takeaway was that cybersecurity professionals need to think about the people behind the information they handle. Data collection can be useful, but companies should still consider what information they collect, how they use it, and how it could affect others.

Corporate Responsibility and the Equifax Breach

Another important topic was corporate responsibility, especially the Equifax data breach. Before studying this case, I probably would have focused mostly on the hackers and the technical vulnerability that allowed the breach to happen. However, the case helped me understand that companies also have a responsibility to protect the information they collect and store.

The breach exposed sensitive personal information belonging to millions of people, including Social Security numbers and other details that could potentially be used for identity theft. What stood out to me was that the people affected had little control over how the company protected their information.

This helped me understand that cybersecurity is not just a technical responsibility. Businesses also have ethical responsibilities to their customers, employees, and the public. Making a profit is important to a business, but it should not come at the expense of protecting people’s sensitive information.

Studying corporate responsibility and Ethics of Care helped me see why companies need to consider the people affected by their decisions instead of focusing only on profits or business goals.

Whistleblowing and Loyalty

The third topic that changed my thinking was whistleblowing, especially the case involving Chelsea Manning. Before this course, I probably would have viewed whistleblowing as either exposing wrongdoing or breaking the rules. After studying the case, I realized that situations like this are more complicated than simply deciding who is right or wrong.

This topic made me think about the conflict between loyalty to an organization and responsibility to the public. Government employees and cybersecurity professionals may have obligations to follow rules and protect sensitive information, but that does not automatically mean every action taken by an organization is ethical.

At the same time, releasing classified information can create risks and potentially harm people. Because of this, I learned that whistleblowing requires careful consideration of the circumstances, intentions, possible consequences, and other available options.

My main takeaway was that following orders does not automatically make a decision morally right, but having good intentions does not automatically make every action ethical either. When these situations come up, it is important to consider who could be helped or harmed before making a decision.

What I Learned About Cybersecurity Ethics

Overall, this course helped me understand that ethical decision-making is an important part of working in cybersecurity. Privacy, corporate responsibility, and whistleblowing showed me that there is usually more than one side to a difficult situation. A decision might benefit one person or organization while creating problems for someone else.

I also learned that cybersecurity professionals need to consider more than technical results. They need to think about privacy rights, professional responsibilities, public safety, and the possible consequences of their actions. These issues are especially important when working with sensitive information or investigating security incidents.

The course helped me become more aware of the responsibility that comes with having access to information and the ability to protect, collect, or expose it. Being able to do something technically does not always mean it is the right thing to do.

How I Can Use This Knowledge in the Future

The knowledge I gained from PHIL 355E will be useful as I continue working toward a career in cybersecurity, cyber law, or digital forensics. In these fields, I may have to work with private information, investigate suspicious activity, or help organizations respond to security incidents. Understanding the ethical side of these responsibilities can help me make better decisions.

For example, I will need to consider privacy when handling personal information, understand the importance of protecting data, and recognize that security decisions can have real consequences for other people. I also want to remember that doing the right thing sometimes requires questioning a decision instead of simply following what an organization wants.

Going forward, I plan to use what I learned in this course alongside my technical knowledge to approach cybersecurity problems from both an ethical and professional perspective. To me, being good at cybersecurity is not just about knowing how to protect a system. It is also about understanding the responsibility that comes with that knowledge and using it in a way that respects and protects others.