Reference no: EM133134975
Managing and Using Information Systems; A Strategic Approach. Chapter 12 on Business Intelligence, Knowledge Management, and Analytics and Chapter 13 on Privacy and Ethical Considerations in Information Management are relevant to this question.
The TJX Co. case is in Chapter 13.
Question 1. Use the 3 normative theories of business ethics to analyze the ethical issues surrounding the opening case of TJX Co., Consider the opening case of TJX, Target and HD who were victim to security breaches where the credit card and other sensitive information about their customers was stolen. Review the company behavior during and after the breach. Using the 3 normative theories of business ethics analyze the ethical issues surrounding this situation. Do you think these companies used Stockholder, Stakeholder or Soc Contract theory to guide them in their interaction with their consumers, law enforcement and others after the breach? Justify your points from any of these cases or personal work experiences.
Question 2. What does it take to be a successful company using business & social analytics? What is IT's role in helping build this competence for the enterprise? Also, discuss the role of IT's in helping build this competence for the company
Question 3. What is the difference between tacit and explicit knowledge? How might an organization manage tacit knowledge? Use Netflix example from the book or from your own experience on which knowledge they use and explain how.
Question 4. Discuss PAPA Framework & GDPR
The European Community's General Data Protection Regulation (GDPR) is a law that became applicable in May 2018. GDPR strictly limits how database information is used and who has access to it.
Some restrictions include registering all databases containing personal information with the countries in which they are operating, collecting data only with the consent of the subjects, and telling subjects of databases the intended and actual use of the databases.
Discuss the relationship between PAPA framework and GDPR. Which PAPA principles do you see implemented in GDPR? Which are omitted?