To balance security with other values, like to prevent data leakage, security experts have to evade the privacy of employees.

To create a foolproof incident response plan to handle and mitigate if an incident occurs.

Create a plan for timely identifying vulnerabilities and reporting to employees, clients, and other stakeholders.

To monitor the network without intruding on users and their privacy.

To ensure confidentiality and integrity of data while storing on systems, on clouds, or by sharing it with third parties.

To define roles properly for accountability.

Virtue Ethics: This framework does not search rules for right or wrong but focuses on the quality of the person. These are also termed as character biased as it tells us about the person’s virtuous character and how one did develop his character.

Consequentialist/Utilitarian Ethics: Consequentialist theories are the theories of ethics that describe principles to guide the moral action through the expected results of those actions. A common form of this theory is utilitarian ethics which tells the moral laws in any situation.

Deontological Ethics: These are based on the rule of ethics in which there are one or multiple rules or obligations declared to identify the responsibility or moral code of life.

Making or usage of the system by keeping in view the human’s interest by checking whether the system running is in favor of human lives or not.

Designing technically as well as socially for encouraging the security and privacy aim in the organization.

Implementing protocols and protective measures such as email and domain security best practices. Monitoring DMARC and DKIM correct implementations and SPF record check to prevent human error and attacks as much as possible.

Encourage me to take input from the different stakeholders as this will overcome groupthink in the ethical risk assessment.