CSR and the Corporate Cyborg: Ethical Corporate Information Security Practices

Journal Business Ethics, 2009

Posted: 20 Sep 2009 Last revised: 25 Nov 2013

See all articles by Andrea M. Matwyshyn

Andrea M. Matwyshyn

Northeastern University - School of Law; Princeton University - Center for Information Technology Policy; Stanford University - Stanford Law School Center for Internet and Society

Date Written: September 15, 2009

Abstract

Relying heavily on Thomas Dunfee’s work, this article conducts an in-depth analysis of the relationship between law and business ethics in the context of corporate information security. It debunks the two dominant arguments against corporate investment in information security and explains why socially responsible corporate conduct necessitates strong information security practices. This article argues that companies have ethical obligations to improve information security arising out of a duty to avoid knowingly causing harm to others and, potentially, a duty to exercise unique capabilities for the greater social good and to buttress stable functioning of social institutions.

Keywords: business ethics, law, corporate social responsibility, information security

JEL Classification: K29

Suggested Citation

Matwyshyn, Andrea M., CSR and the Corporate Cyborg: Ethical Corporate Information Security Practices (September 15, 2009). Journal Business Ethics, 2009. Available at SSRN: https://ssrn.com/abstract=1473594

Andrea M. Matwyshyn (Contact Author)

Northeastern University - School of Law ( email )

416 Huntington Avenue
Boston, MA 02115
United States

Princeton University - Center for Information Technology Policy ( email )

C231A E-Quad
Olden Street
Princeton, NJ 08540
United States

Stanford University - Stanford Law School Center for Internet and Society ( email )

559 Nathan Abbott Way
Stanford, CA 94305-8610
United States

Register to save articles to
your library

Register

Paper statistics

Abstract Views
889
PlumX Metrics