Penetration testing professional ethics : a conceptual model and taxonomy

In an environment where commercial software is continually patched to correct security flaws, penetration testing can provide organisations with a realistic assessment of their security posture. Penetration testing uses the same principles as criminal hackers to penetrate corporate networks and thereby verify the presence of software vulnerabilities. Network administrators can use the results of a penetration test to correct flaws and improve overall security. The use of hacking techniques, however, raises several ethical questions that centre on the integrity of the tester to maintain professional distance and uphold the profession. This paper discusses the ethics of penetration testing and presents our conceptual model and revised taxonomy.

A taxonomy of penetration testing ethics

In an environment where commercial software is continually patched to correct security flaws, penetration testing can provide organisations with a realistic assessment of their security posture. Penetration testing uses the same principles as criminal hackers to penetrate corporate networks and thereby verify the presence of software vulnerabilities. Network administrators can use the results of a penetration test to correct flaws and improve overall security. The use of hacking techniques, however, raises several ethical questions that centre on the integrity of the tester to maintain professional distance and uphold the profession. This paper discusses the ethics of penetration testing and presents our conceptual model and revised taxonomy.

Toward an integrative role for intranets : an interpretive case study of intranet-based dynamic knowledge integration in socio-technical networks

An increasing challenge for contemporary businesses is to be able to respond to perceived opportunities and threats by dynamically integrating knowledge dispersed across and beyond the organisation. This paper provides findings from two interpretive case studies that illustrate how corporate intranets can be dynamically interwoven with other knowledge technologies in socio-technical networks (STNs) to integrate distributed formal and infonnal knowledge. A key finding suggests that businesses should carefully examine employee use of intranets for dynamic knowledge integration, and any implications stemming from this new integrative role for intranets. The paper also provides a theoretical framework for dynamic knowledge integration in STNs, which can underpin future research in this area.

Bureaucratic, corporate/market and network governance : shifting spaces for gender equity in education

Education as a field of policy, research and practice has been reconfigured over four decades by economic, social and cultural globalization in conjuncture with neoliberal policies premised upon markets and new managerialism. One effect has been shifting boundaries between, and understandings of what constitutes the public and the private with regard to the role of the state vis-á-vis the formation of gendered subjectivities and civil society and the gendering of public– private relations in and between family and work. Drawing on feminist readings of Bourdieu and critical policy sociology, I consider the implications of a move from bureaucratic educational governance framed by state welfarism to corporate or market governance framed by the post-welfare state, and consider whether particular constructions of globalization and corporate/market governance lead to network governance. Network governance, it is argued, is premised on new forms of sociality and institutional reconfigurations of knowledge-based economies and a spatialized state that coordinates rather than regulates multiple public– private providers. The question is how each mode of governance frames various possibilities and problems for gender equity in education.

Communities of practice in Academe (CoP-iA) : understanding academic work practices to enable knowledge building capacities in corporate universities

A form of voluntary workplace engagement, communities of practice are characterised in literature as providing entities with the potential to harness the multiplier effects of collaborative processes by building on informal networks within entities. As knowledge building and sharing institutions it would be reasonable to presume that communities of practice activities have been embraced to facilitate a level of connectedness and engagement in a university context. However, evidence from the Australian higher education environment suggests that the enlistment of communities of practice processes by universities faces a number of challenges that are peculiar to academe. We suggest that academic knowledge work practices are significantly different from the business/industry related applications of communities of practice and that an understanding of the unique aspects of such practices, together with the impediments posed by a 'corporate university' model, require acknowledgment before the knowledge building and sharing aspects of communities of practice activities in academia can emerge.

Management framework for corporate telecommunication and data centre information security

Network security, particularly Internet security, is at the forefront of business and government networks. This research has discovered weaknesses in current professional practice, particularly in mitigation strategies to reduce the impacts of security violations in corporate telecommunications and data centres. The importance of integrating security policies, processes and operational practice is demonstrated. Leadership models and innovation mechanisms best suited to improved security design are also identified.

Gender and ethnic diversity on boards and corporate responsibility : the case of the arts sector

This study provides insights on sector-specific characteristics, challenges and issues that affect corporate responsibility (CR) in relation to ethnicity and gender on arts boards. Using stakeholder theory, the study explores how arts board composition (e.g. gender and ethnicity) sets the scene for dynamics that affect CR. Data analysis is based on interviews with 92 board members and stakeholders sitting on 66 arts boards in Australia. Results suggest that the dynamism of gender and ethnic diversity on arts boards makes them responsive to CR; however, their presence does not always lead to CR. For diverse boards to lead to CR, our findings indicate the significance of board member attributes of passion, skill and capability of developing networks, irrespective of gender and ethnicity. The article advances understanding of the implications and relevance of ethnic and gender diversity on non-profit boards and contributes to an important yet under-researched body of literature.

Ethical transnational corporate activity at home and abroad: A proposal for reforming continuous disclosure obligations in Australia and the United States

Multinational Corporations establish operations in states with lower legal and ethical standards in areas including the environment, wages, labor standards, human rights, corruption, and company taxation. Corporate law scholars cannot be indifferent to the horrific consequences of these lax standards. From contributing to rapes and violent incidents stemming from trade in conflict minerals in the Congo to the killing of workers due to poor conditions in garment manufacturing units in Bangladesh, multinational corporations exploit conditions in developing countries abroad without disclosing their actions at home. We advance a normative argument to clarify and strengthen the existing model of disclosure-based regulation to hold MNCs accountable. We argue that, since the core expectations held by shareholders of companies are the same whether they are operating within our borders or externally, a harmonization of disclosure obligations imposed by law would be a more flexible and less costly solution. We posit that a broader reading of the disclosure obligations of companies under existing legislation like the Reg. S-K in the United States, the continuous disclosure rules under * Dean and Professor of Law, University of Newcastle Law School. Sandeep Gopalan would like to thank Terrie Troxel, Jack Tatom, Professor Bill Wilhelm, and the Networks Financial Institute at Indiana State University College of Business for their valuable support in conducting research for this article. We are also grateful to Audrey Son, Bassam Khawaja, and the editorial staff of the Columbia Human Rights Law Review for their excellent editorial work. ** Solicitor and doctoral candidate, University of Newcastle Law School. 2 COLUMBIA HUMAN RIGHTS LAW REVIEW [46.2:1 the Australian Corporations Act 2001, and listing rules such as those adopted by the Australian Securities Exchange and the New York Stock Exchange would require the disclosure of material corporate practices outside our national borders.