Ethics of IT Security Team for Cloud Architecture Infrastructure in Banking and Financial Services Industry

摘要

Information systems over cloud architecture infrastructure for Banking and Financial Services Corporations are under constant monitoring by IT security team. This monitoring is to keep check for vulnerabilities, security breach incidents and intrusion in cloud environments and network. IT security team are equipped with sophisticated monitoring tools and empowered to take action in the event of security breach or cyber-attack. This gives IT security team privilege access rights to block and investigate attachments, data packets and logs of various users of cloud infrastructure. The investigation may involve or provide access to the private information of the users. This information can be in emails, files & folders, personal documents and messenger history. In such events, IT security teams are supposed to follow ethical standards established by organization and show high integrity to keep privacy of the cloud users and confidentiality of the investigation. In this paper, we have identified the roles & responsibilities and ethical behaviour expected from IT security teams. This paper also enlists various events that demand ethical behaviour from IT security teams in Banking and Financial Services Corporations.