An information security manager routinely monitored the web surfing done by her company’s employees. She discovered that many employees were visiting the ‘sinful six’ websites. (Note: The sinful six are websites with material related to pornography, gambling, hate, illegal activities, tastelessness and violence.) She then prepared a list of the employees and their surfing histories and gave the list to management. Some managers punished their employees. Some employees, in turn, objected to the monitoring, claiming that they should have a right to privacy.
a) Is monitoring of web surfing by managers ethical? (It is legal.) Support your answer.
b) Is employee web surfing on the ‘sinful six’ ethical? Support your answer.
c) Is the security manager’s submission of the list of abusers to management ethical? Why or why not?
d) Is punishing the abusers ethical? Why or why not? If yes,then what types of punishment are acceptable?
e) What should the company do in this situation? (Note: There is a variety of possibilities here.)