Lesson 4.47: The ethics of security decisions
Many security tools can see far more than security needs: every website an employee visits, every message, every login. The more senior you are, the more often you decide not whether something can be done but whether it should be. In Intro 301 you met insider-risk rules and in 401 the DPIA; here they become a leadership decision. In the lab you test a proposal for full inspection of employees' web traffic against necessity, proportionality, transparency and access, read the works council's objection, and record a decision that keeps the security goal, cuts the intrusion and documents the dissent.
19 min
You will learn to
- Test a proposal for necessity
- Test proportionality (scope, retention)
- Test transparency and access
- Weigh objections from affected people
- Record a decision with its dissent
Key terms
- Necessity
- Showing a measure is needed for a legitimate aim and that less intrusive options aren't enough.
- Proportionality
- Keeping the intrusion in balance with the benefit: scope, depth and duration.
- Transparency
- Telling the people affected what is done and why.
- Special category data
- Sensitive personal data such as health or trade-union membership with extra protection (GDPR Art. 9).
- Recorded dissent
- Writing down disagreement with a decision and its reasons.
← Executive crisis simulation · All lessons · Hard and symbolic links →