text:
Information Technology and Ethics/Generative AI Ethics

What is Generative AI?
The term "Generative AI" refers to a sort of artificial intelligence that generates new data or content, such as writing, pictures, music, and movies, that didn't previously exist. Using machine learning techniques, frequently deep neural networks, it discovers the patterns and structures of the data it is trained on, and it then uses this knowledge to create new content. According to reports, research and development on the subject of generative AI, which has applications in fields including art, music, gaming, and design, is accelerating swiftly.

The History of Generative AI
In the beginning, rule-based systems that could make decisions based on a list of specified criteria were the main focus of AI research. These systems were largely static and only partially capable of picking up new information and adapting to it.

Artificial intelligence made tremendous strides in the 1980s and 1990s with the invention of neural networks. To mimic the organization of the human brain, neural networks were developed with interconnected nodes that could process input concurrently. This gave generative AI more chances and made decision-making processes more dynamic and complex.

In the late 1990s and early 2000s, a new wave of AI research emerged that focused on Bayesian inference and probabilistic modeling. Through the use of partial or erroneous data, this technique allowed for the development of more sophisticated generative models that could account for uncertainty.

Deep learning techniques' recent introduction has sparked a revolution in the field of generative AI. Deep learning models are able to learn from vast amounts of data and can create new results that are exact replicas of human-made decisions. This has opened up new possibilities for artistic endeavour's, including the creation of music, artwork, and even full novels.

Machine learning algorithms are used in the fascinating area of artificial intelligence known as "generative AI" to produce original content, including text, images, and videos. Unlike traditional machine learning, which focuses on categorization and prediction tasks, generative AI is focused on creative tasks. Generative AI is a fascinating area of research with a lot of potential for a range of applications, including art and entertainment, drug development, and scientific research. As we continue to develop more complex generative AI models and methods, we may anticipate seeing even more remarkable and revolutionary applications emerge in the years to come.

Two Types of Generative AI
Fundamentally, generative AI involves using enormous datasets to train a model to generate new, realistic content that closely mimics the source data. The two most common types of generative AI are variational auto-encoders (VAEs) and generative adversarial networks (GANs).

Type 1
GANs are made up of a generator and a discriminator, two neural networks that work together to produce new content. The generator generates new data based on random input, and the discriminator judges how realistic the samples are. The two networks are trained simultaneously in an approach called adversarial training, where the generator tries to deceive the discriminator while the discriminator aims to appropriately classify real and generated data. Eventually, the generator gains the capacity to output data that is accurate and similar to the input data.

Type 2
VAEs, on the other hand, are neural networks that have the ability to encode and decode data. They learn to reduce incoming data into a latent space, a low-dimensional representation, and use this representation to generate new samples of data. A loss function that VAEs are trained to optimize measures how closely the output data matches the input data. VAEs, on the other hand, are neural networks that have the ability to encode and decode data. They learn to reduce incoming data into a latent space, a low-dimensional representation, and use this representation to generate new samples of data. A loss function that VAEs are trained to optimise measures how closely the output data matches the input data.

GANs and VAEs, respectively, can be used to create images, movies, and text. They require a large amount of high-quality data to operate effectively, and the training process can be time-consuming and computationally expensive.

Function and Output
Generative AIs are typically trained using a set of data. Based on this training, Generative AI tweaks a number of parameters until they produce an output similar to the training data. In order to make the generated output more similar to what might be present in the training data, the model must learn patterns within the data because it has fewer parameters than the training data. A Generative AI is divided into several distinct layers of nodes, each of whose values is interdependent on the others. The values of the nodes are changed between layers by using the numerical weights of connections. These layers can be split into three categories: the input layer, the output layer, and any number of layers in between, collectively referred to as "hidden layers."

To train a GAN, for example, a random seed is fed to the input layer of the generator, which then passes values between layers to generate an output. A set of these outputs, along with a set of training data, is passed to the discriminator network, which then tries to classify whether an input is from the training data or a generated output. Based on the results from the discriminator, weights in the network are tweaked so that future outputs of the generative network are more difficult for the discriminator to distinguish from the training data.

To generate, Generative AIs start with a small set of random data, which is passed to the input layer. These values in the input layer are fed through the different layers, being affected by the weights in between nodes, similarly to the process of training. At the output layer, the result is shown to the user.

Since the weights between the nodes are determined by the training data, the exact way a Generative AI processes data may change depending on the size of the dataset, the variety of data present within the dataset, and the training process. This may also mean that a Generative AI may struggle with generating an output that was underrepresented or entirely omitted from its training data.

Biased Outputs
Similar to other types of AI, Generative AIs are capable of producing biased outputs. This stems from a number of issues. Systemic biases present within institutions, culture, history, and/or society will affect the training data. These biases are then reflected as statistical and computational biases in the model. Inherent human biases exist as well, which influence the training data, the design of the model, and the use of its output.

Biases in Generative AI outputs can be reduced or eliminated throughout the lifecycle of the model. In the initial phase, designers need to avoid biased training data. Biases in training data can include issues such as not being representative of populations due to how the data was acquired (i.e., data scraped from a website is not representative of all humans or even other Internet users); systemic and historical biases, such as a correlation between race and ZIP code; and others. Additionally, design teams should have a diverse variety of members to reduce biases during decision-making processes. During the design phase, analyses should be conducted to identify sources of bias as well as plans to mitigate them. These should be continually evaluated to ensure the mitigation strategies are working well. Once deployed, the model should be constantly monitored to ensure minimal bias. If necessary, a model should be retrained or decommissioned.

Copyright
One of the major implications that generative AI has is copyright ambiguity. This simply means that it is uncertain who would own the rights to the new creative content. Generative AI models are usually trained with large datasets along with contents from various websites, social media, Wikipedia, and huge discussion hubs such as Reddit. As it includes copyrighted material, it can be used to articulate various summary responses asked by the user. This can potentially give rise to copyright infringement by the owner of the content.

There has been a lot of ongoing debate on this case. The copyrighted content (both text and pictures) is used in the training data sets, which give rise to a significantly high modulus of languages for Generative AI. The question here arises: should such copyrighted material be allowed to train datasets for Generative AI? The answer is still uncertain, but looking from the perspective of the owner of the original content, it is violating the copyright act.

Job Loss / Creation
As generative AI is progressing rapidly, there is a high possibility that it can contribute to unemployment at certain stages. This could be possible when the AI automates certain tasks or activities, displacing human workers. For example, in any B2B organization, the marketing team would be responsible for creating email campaigns that needed to be sent to their clients. The work includes making email templates, drafting the campaign emails, and getting reports on the open and click rates of those email campaigns. So, if an AI is able to create the contents of the email campaigns, the people working towards the creation of these email campaigns would be displaced.

Another example is that if AI automates the customer service tasks, then the workers usually working at the call centers providing in-person customer service would be replaced. Some of the AI modes are able to generate the codes as well. So, it can also risk the roles of developers, as AI is usually capable of writing that code in an effective manner, which means taking less time and causing minimal errors.

Truthfulness / Accuracy
Generative AI usually gives uncertain responses to certain questions, such as may be, not sure about it, etc. As generative AI makes use of machine learning modules, it does guarantee 100% accuracy. There have been instances where this AI has provided highly incorrect answers to certain questions. Not only that, there have been instances where it has failed miserably in solving certain logics in mathematics. Apart from that, in popular games such as chess, where computers are known to play smarter than humans, AI does make irregular moves that do not make any sense. This eventually increases the risk of spreading false information through such chatbots.

Social Engineering
Generative AI can be misused by convincing people to fall into its trap by creating sounds that replicate human sounds. They can use this to send phishing emails or scam phone calls. For example, the attacker can use this tool to claim that he is calling from the IT department of the organization and can eventually convince the user to share his login ID and password, thereby gaining access to his system. So generative AI can lead to social engineering attacks.

Future Impacts
As generative AI continues to improve, there are several concerns about what potential future societal impacts may arise.

Software Engineering Roles
As various AI technologies continue to improve and evolve, there is a whole new job market for software engineers. Environments known as "robo-software engineering environments work to maximize efficiency by incorporating both AI technology and human creativity and work.  As robo-software engineering environments become more common, there will need to be teams of software engineers whose main role is to develop and maintain this new AI software. Furthermore, once the AI has been deployed for public use, it must still be overseen, maintained, and updated by human software engineers.

Regarding the design and development of AI and other machine learning systems, there are many areas of research/work that software engineers can venture into. In this sector of AI software design, engineers should be monitoring any possible performance degradation regarding the AI software, looking into new and more efficient architectural styles and patterns, and looking into ways to better analyze and handle extremely large datasets. A coding team of software engineers will also need to become extremely familiar with how their chosen AI works; this involves learning what algorithms it uses, what NLP tools it has, and how it can help automate their daily work. To best incorporate the realm of human innovation into AI software efficiency and precision, software engineers must innovate new approaches for beneficial collaboration between humans and machines. Such methods require improvements in communication techniques to ensure seamless teamwork toward an end goal.

School
Teachers and students will begin to implement generative AI, such as ChatGPT, into their educational environments. Already now, there are examples of teachers utilizing AI to generate lesson plans, exams, essay questions, etc. As time passes, this technology will only improve, and teachers will be able to automate a large number of their tasks. "hatGPT successfully passed graduate-level business and law exams and even parts of medical licensing assessments (Hammer, 2023), which has led to suggestions for educators to remove these types of assessments from their curriculum in exchange for those that require more critical thinking.” On the opposite spectrum, students have begun to utilize generative AI to mitigate the amount of busy work they actually need to do.  Models such as ChatGPT have been key tools in which outlines, papers, and code can be generated and then modified for student submission.  It is crucial to remember that not all content generated by these models is 100% accurate; therefore, students should take care not to rely on these models; instead, they should use generative AI as a tool for education, not a cheat code.  Technology has also been coming out to help detect AI-submitted content to mitigate students taking advantage of generative AI; GPTZero, for example, was designed specifically for detecting ChatGPT-generated content.

As of now, most academic institutions have banned the usage of generative AI, such as ChatGPT; however, this is only a temporary solution. As this technology continues to improve and become more accessible to everyone, it will become near impossible for a ban to continue. Academic institutions should begin to focus on teaching the new generation how to use tools such as generative AI in conjunction with their own knowledge and creativity. Much like how the Internet transformed how students and teachers interacted with each other, generative AI and other AI technologies will have significant impacts in the future.

Drug Development
Generative AI systems can be trained on sequences of amino acids or molecular representation systems, such as AlphaFold, which is used for protein structure prediction and drug discovery. The models have become high-potential tools to transform the design, optimization, and synthesis of small molecules and macromolecules. On a large scale, there is the potential to boost the development process.

The stages of the process are as follows:

 * Stage 1: There is AI assistant target selection and validation.
 * Stage 2: Molecular design and chemical synthesis
 * Stage 3: Biological evaluation, clinical development, and post-marketing surveillance
 * Stage 4: Several successful preclinical and clinical molecules identified by AI and deep generative models

Role of VAE and GAN
The role of VAEs is to optimize the log-likelihood of the data by maximizing a lower bound on a likelihood function. Alternately, GAN learns to measure the difference between the so-called “valid” and “synthetic” molecules. However, most of these require large volumes of data. Currently, there is a lack of quality data, and adding to it is an efficient data-sharing process; therefore, data harmonization plays a crucial role in the drug discovery process.

The current AI technologies restrict the application and affect the performance of drug development due to the lack of or limited interpretability, inaccessibility, and lack of availability of high-quality data.

Legal Profession
ChatGPT, amongst other services, could potentially significantly impact the legal profession as a whole, not just students. ChatGPT itself stated that, although difficult to predict, there are reasons to believe that the transformation of legal services through generative AI systems will happen quickly, as soon as 5 to 10 years. In terms of students, ChatGPT stated that they should be aware that there is a possibility of these systems performing said jobs instead of humans. The focus should be on understanding how these systems work and how they can be used.

ChatGPT is capable of many things in the legal profession. For example, in drafting it proved that it can draft advanced legal documents, including demand letters without prejudice and pleadings. These drafts demonstrate the ability of ChatGPT to elaborate and enhance the content based on simple facts inputted. Amongst other things ,hatT is able to identify legal strategies, generate a skeleton argument to support the case, anticipate potential defences, etc.,

Despite the capabilities, ChatGPT lacks the capability to undertake legal research and analysis as a competent lawyer could. It is anticipated that legal database like WestLaw and Lexis will adopt generative AI. However, it should be noted that ChatGPT currently lacks the capability to undertake legal research and analysis to the same extent as a competent lawyer.


text:
Character Encodings/Code Tables/EBCDIC/EBCDIC 829

IBM code page 829 is an EBCDIC code page used in IBM mainframes. It is called Math Symbols. This code page is supported by IBM.

license: Creative Commons - Attribution Share-Alike - https://creativecommons.org/licenses/by-sa/4.0/


text:
Information Technology and Ethics/Why compliance management?

Compliance Management
Compliance management is a process that enables companies to make sure that they are following industry standard regulations i.e., the correct set of rules and regulations to make sure that the data is protected in a better way. It is also important to have proper compliance management because nowadays companies have access to a large pool of data hence making it very important for them to follow certain compliances hence companies spend a lot in hiring lawyers etc to make sure that they are compliant. Some of the common compliances are CCPA, FERPA, CMMC, etc. If the said compliance in their sectors is not followed, they might be subject to large files such as: : And if the company still does not follow, the compliance fines tend to multiply. Let’s talk about the type of data subject to cyber security compliance, it includes : Other types of information include race, religion, marital status, biometric data, email address, username, passwords, etc. It is important to have a better compliance team to save the company from data breaches, protect the reputation, protect from fines, maintain customer trust, etc. According to the compliance management lifecycle, the following are the pillars of compliance : Examples:
 * 1) The penalty for non-compliance with HIPAA can range from $100 to $50000 per individual violation.
 * 2) The penalty for non-compliance with the PCI DSS ranges from $5000 to $10000 per month till the time the compliance is achieved.
 * 3) The GDPR has a maximum violation of €20 million or 4% of the annual turnover, whichever is higher.
 * 1) PII data: It includes the date of birth, first/last name, address, Social Security number, mother's maiden name, etc.
 * 2) Financial information: it includes credit card numbers, expiration date, CVV, bank account details, PINs, credit history, account summary, etc.
 * 3) PHI data: it includes medical history, insurance, record, appointment history, prescriptions record, hospital, admission record, etc.
 * 1) Attack surface monitoring: It includes looking for vulnerabilities in the system or bugs that might open back doors.
 * 2) Risk prioritization: Once the vulnerabilities are known, it should be prioritized on the basis of the impact that they might have on the data.
 * 3) Remediate risk: Once the prioritization is complete immediate steps should be taken to fix the issue or minimize the effect.
 * 4) Report compliance efforts: It means documenting the efforts that were taken to minimize or fix the issue in order to keep the seniors and auditors in the loop.

The protected health information (PHI) of 2,743 people was made public by a software attack on Anchorage Community Mental Health Services (ACMHS) in 2012. The breach happened because ACMHS didn't apply the required security changes and fixes, which left their systems open to attack. According to a study by the U.S. Department of Health and Human Services (HHS), ACMHS broke HIPAA Security Rules by failing to put in place sufficient security measures and perform regular updates.

In 2012, (ACMHS) Anchorage Community Mental Health Services database was attacked leaking protected health information (PHI) of 2,743 individuals. This breach was due to failure of ACMHS to apply required security updates and patches, making its systems vulnerable. An investigation held by the U.S. Department of Health and Human Services (HHS) revealed that ACMHS had neglected to implement security measures and perform updates, violating HIPAA Security Rules.

ACMHS got a $150,000 fine and had to make a plan to fix the problem. As part of this plan, a full risk review and the creation of a risk management strategy were both done to stop future leaks. The event shows how important it is to follow strict hacking rules and the serious effects of not following HIPAA rules.

GDPR
General Data Protection Regulation (GDPR) is a comprehensive privacy and security law in the world. It was drafted and implemented by the European Union on May 25, 2018. It aims to protect the data of EU citizens by imposing obligations and organizations anywhere in the world collecting the data of citizens of the EU. Violating the terms of GDPR regulations can lead to fines of up to 20 million euros. The General Data Protection Regulation (GDPR) was enacted by the European Union in 2018. It regulates data protection and aims to enhance data privacy as well as strengthening data security. It also relies on different principles, such as confidentiality, accountability, and lawfulness. GDPR is applicable to businesses that handle the personal data of EU citizens. A plethora of measures are implemented. The first one is performing Data Protection Impact Assessments (DPIAs). The next measure taken is Designating Data Protection Officers (DPOs) to monitor compliance. Organizational and technical precautions are integrated to guarantee the security and privacy of personal data with DPOs. It is mandatory for organizations to acquire consent before handling any data processing. It is very important that businesses obtain the explicit consent of individuals before gathering and processing their personal data is one of the key principles of the GDPR. Any company that operates within the EU or EEA, and any business that has recourse to the personal data of individuals within the EU or tracks the behavior of an individual within the EU, is bound by the GDPR. Organizations must also offer comprehensive privacy notices, and accommodate for individuals to exercise their personal data rights. This includes the right to access, modify, or delete their data. Penalties for non-compliance to the GDPR may include fines as much as €20 million or 4% of international annual turnover, usually whichever is larger.

According to the NYTimes, google was fined 50 million euros for not properly disclosing to users how data is collected across its services like its own search engines like Google and its services like Maps and YouTube. This penalty is considered one of the largest under the EU privacy law i.e., GDPR. There are some GDPR compliance checklists that must be followed by every US company dealing with European citizens' data.

Top GDPR fines till date:
 * Conducting information audit for EU personal data.
 * Inform the customers about the reason behind the processing of their data.
 * Assess the data processing activities and improve the protection
 * Data controllers should make sure that they have a data processing agreement with the vendors.
 * A designated data protection officer should be appointed especially by the larger organization.
 * Non-EU organizations are required to appoint a representative based in one of the EU member states.
 * Duties should be known during the event of data breach.
 * Organizations should comply with cross-border transfer laws.

 * Meta

It was fined a total of 405 million euros for violating children privacy through the publication of email addresses and phone numbers.

 * Clearview AI Inc.

A fine of 20 million euro was imposed on an AI company in America for collecting selfies and utilizing them to expand its database of approximately 10 billion faces. The company used to then sold its identity verification services to various industries, including law enforcement.

 * Google

Google was fined by AEDP, a Spain’s data protection agency a 10 million euro after the search engine giant was found to be passing the personal data of EU citizens who were requesting erasure of their data to the Lumen Project. The AEDP found that the content removal form Google provided to data subjects for exercising their right to be forgotten was confusing.

After discovery of the search engine giant was giving the Lumen Project access to the personal information of EU individuals who were requesting their data be erased, AEDP, Spain's data protection body, penalized Google 10 million euros. The AEDP discovered that Google's form for material removal, which individuals used to exercise their right to be forgotten, was unclear.

 * Rewe

Rewe, a supermarket chain was imposed a fine a 8 million euro for breaching the GDPR in the year 2022.

 * COPPA

COPPA is an acronym for the Children’s Online Privacy and Protection Act. It was enacted in 1998. This act focuses on protecting the personal information of kids who are 12 years old and younger. Personal information in question includes, but is not limited to, the name of the child, the address of the home that the child lives in, images of the child, phone number, and more. COPPA protects this information in a variety of different ways. One of the ways COPPA does this is requires a parent or guardian to consent to the collection of information of their children. This is to ensure that parents and guardians are aware of what a company is collecting regarding their child. To add on to this, it is worth mentioning that teachers and schools can be a substitute for the parent’s and guardian’s consent if, “the tool is used for an educational purpose.” Another way that COPPA does this is by requiring companies to, “have a ‘clear and comprehensive’ privacy policy.” By having, “‘a clear comprehensive’ privacy policy,” parents and guardians of the child will have a strong understanding of what information the company is collecting, but also how it could possibly affect them. Additionally, COPPA requires all companies who collect personal information regarding a child to keep this information confidential and secure. Like any personal information, this can be used to identify someone and be used for malicious purposes. Keeping a child’s information confidential and secure ensures that a threat actor doesn’t gain access to this information, thus protecting the child from unauthorized third parties.

Recent COPPA Violations

 * Microsoft
 * One company that has violated COPPA recently is Microsoft. This case was between the United States Government and Microsoft. Microsoft violated this act through using its Xbox gaming system in order to collect, “personal information from children who signed up to its Xbox gaming system without notifying their parents or obtaining their parents’ consent, and by illegally retaining children’s personal information.” The case was closed with a settlement between Microsoft and the Federal Trade Commission (FTC) by having Microsoft pay twenty million USD to the FTC.
 * Epic Games
 * Another company that recently violated COPPA is Epic Games. Epic Games was found guilty of violating COPPA in 2022. This violation focused on one of Epic Games products, Fortnite, a free-to-play video game. The game consisted of various in-game purchases, such as cosmetic items and in-game currency, that a user can buy using money. The FTC stated that Epic was in violation of COPPA for various reasons. The first being that they failed, “to notify parents, [in order to] obtain, [the parents’] consent.” Due to Epic Games not obtaining parental consent at the time, they were able to collect children's’ information and when a parent wanted to request for the collected information to be deleted from Epic’s systems, they had, “to jump through unreasonable hoops, and sometimes failed to honor such requests.” Another violation that the FTC stated is that Epic Games had default settings that could harm children. This was in reference to, “text and voice communications for users.” Epic had these settings enabled by default in such a way where users who didn’t change the default settings would be forced to communicate with strangers that they may play with online. This caused kids to face various consequences of this such threats and harassment from strangers online. On top of this, the FTC also stated that Epic Games, “used dark patterns to trick users into making unwanted purchases,” and also allowed kids to make various unauthorized purchases without parental consent. These dark patterns are referred to the various methods that epic games used to target anyone in order to get them to make an unintentional in-game purchase. Additionally, anyone, “who disputed wrongful charges with their credit card companies,” would not only lose access to the purchased content but also any authorized purchases and their account. This case was ended by a settlement in which Epic Games not only had to pay 245 million USD to the FTC but also had to provide an opportunity for those affected by the violations to receive a refund for their purchases.

 * CCPA

The California Consumer Privacy Act (CCPA) was enacted in 2018. This act allows consumers to have more authority over the individual data that businesses collect about them. Furthermore, the CCPA regulations offer instructions on how to put the law into effect. Officially, this policy includes the “right to know about the personal information a business collects about them, and how it is used and shared.” Additionally, it includes the “right to delete personal information collected from them, the right to opt-out of the sale or sharing of their personal information,” and lastly, “the right to non-discrimination for exercising their CCPA rights”. Although, it’s also important to note that there are some exceptions to the ‘right to delete’ portion of this act. For instance, if a business has legal obligations to hold onto sensitive data, this portion may not apply. Moreover, in 2023, on January 1st, the CCPA was amended to include further privacy protections. These protections include the right to rectify incorrect personal information, as well as the right to restrict the utilization and disclosure of sensitive personal data.
 * HIPAA Compliance

The Health Insurance Portability and Accountability Act (HIPPA) was enacted in 1996. This act enables nationwide standards to protect an individual’s medical and personal health information. The items covered under HIPPA include but are not limited to healthcare providers, health plans, clearinghouses, and their business associates. The business associated can be the organization that executes the jobs that involve disclosing protected health information (PHI).

As a part of HIPAA compliance there are different sections like breach notification rule, security and privacy rules which companies need to follow in order to enable patients to get access of their data. As according to the HIPAA guidelines companies have about 45 days to process the data from the day the patient submitted the request. This request can be both in regards to data access or data deletion and applies to both existing and new patients of a certain health system. Once the 45 days are passed and the data is not processed, the companies are held liable and can be sued. The HIPAA also give a clear distinction of what data is classified as a PHI or a unsecured PHI. Along with this they also talk about how those data can be stored electronically and used by IT-Healthcare companies and does outline the laws for the same in addition to the traditional healthcare sector that was limited to offline market.. Healthcare organizations must therefore take the necessary steps to adhere to HIPAA rules, including frequent risk assessments, the implementation of suitable security controls, employee training on HIPAA policies and procedures, and timely response to any PHI breaches.

The following are some of the key requirements for HIPAA Compliance:

 * 1) Privacy Rule: The HIPAA Privacy Rule establishes federal requirements for safeguarding the privacy of people's health information, including the demand that covered businesses seek patients' written consent before revealing their data.
 * 2) Security Rule: According to the HIPAA Security Rule, covered organizations must put in place administrative, physical, and technical measures to protect the availability, confidentiality, and integrity of electronic protected health information (ePHI).
 * 3) Breach Notification Rule: The HIPAA Breach Notification Rule mandates that, in the event of an unprotected ePHI breach, covered entities notify impacted people, the Secretary of Health and Human Services, and, in some circumstances, the media.
 * 4) Enforcement Rule: Procedures for investigations, hearings, and the enforcement of civil monetary penalties for HIPAA rule infractions are established under the HIPAA Enforcement Rule.
 * 5) Omnibus Rule: The HIPAA Omnibus Rule significantly altered the HIPAA rules, extending liability to business partners of covered businesses, stiffening fines for non-compliance, and enhancing people's access rights to their health information.

 * SOC 2 Compliance

As organizations continue to rely on technology to run their operations, the need for robust security measures becomes paramount. SOC 2 compliance has become one of the most important criteria for service providers and vendors to have controls in place to protect their customers' data. We take a closer look at the five Trust Service Principles of SOC 2 and the benefits of achieving compliance. This principle focuses on protecting data from unauthorized access, disclosure, and destruction. Controls based on this principle include access control, encryption, and auditing of security events. availability: This principle focuses on ensuring that the system can be operated and used as agreed with the customer. Management based on this principle includes plans for redundancy, backup, and disaster recovery.

This principle focuses on ensuring that system processing is complete, accurate, timely and authorized. Controls based on this principle include input validation, data reconciliation, and error handling. This principle focuses on ensuring sensitive data is protected from unauthorized access or disclosure. Controls based on this principle include access control, encryption, and data classification. This principle focuses on ensuring that personal information is collected, used, stored, and disclosed in accordance with the organization's privacy policy and relevant laws and regulations. Controls based on this principle include data minimization, consent management, and data subject rights.

SOC 2 compliance demonstrates an organization's commitment to security and privacy and can enhance reputation and credibility with customers and partners. SOC 2 compliances can give companies a competitive advantage over competitors who may not have gone through the same rigorous review process. crisis management: SOC 2 compliance helps organizations identify and remediate potential security risks and vulnerabilities, thereby improving their overall security posture. SOC 2 compliance helps organizations meet the security and privacy requirements of industry-specific regulations such as HIPAA and PCI DSS. Being SOC 2 compliant can increase customer confidence in your organization's data protection capabilities, which can lead to increased customer loyalty and retention.

Data Security Strategies in Compliance Management
From a broad perspective on regulatory compliance, we now shift our focus to the specifics of data security. It's essential to see how these frameworks are applied in practice to protect sensitive information. This section explores the foundational mechanisms and technologies critical to compliance management. Data protection is central to compliance management, crucial for organizational control, and automation requirements in various industries. By examining specific strategies like encryption, access control, and continuous monitoring, we aim to demonstrate how organizations can meet regulatory expectations to effectively safeguard critical data.

Security Infrastructure and Technologies

Encryption: Primarily used to protect data on the move and at rest, employing algorithms that encrypt data, accessible only to individuals with decryption keys.

Firewalls and Intrusion Detection Systems (IDS): Firewalls serve as barriers between an organization's secure internal networks and potentially unsafe external networks. IDS systems monitor network traffic to detect and respond to suspicious activities.

Data Masking and Tokenization: These techniques ensure that sensitive data remains anonymous or obscured in environments like testing or analytics, enhancing security while maintaining functionality.

Access Controls and Authentication

Role-based Access Control (RBAC): This security methodology restricts access to information based on individuals' roles within an organization, ensuring access is limited to necessary information for their duties.

Multi-factor Authentication (MFA): Enhances security by requiring multiple verification forms from users before access to systems or data is granted, significantly reducing unauthorized access risks.

Monitoring and Auditing

Continuous Monitoring: Involves the constant observation of system activities to quickly identify and mitigate potential security threats.

Regular Audits: Essential for evaluating the effectiveness of security measures and identifying potential improvements to enhance data protection.

Policies and Training

Data Security Policies: Organizations create and enforce policies that dictate data handling, sharing, and protection. These policies are regularly updated to address new threats and compliance requirements.

Employee Training Programs: Employees receive regular training on data security importance and specific protocols to protect sensitive information, ensuring widespread compliance.

Incident Management and Recovery

Incident Response Plans: Detailed plans that outline immediate actions, mitigation strategies, and notification procedures for efficiently managing data breaches or security incidents.

Backup and Disaster Recovery: Regular backups and comprehensive disaster recovery plans ensure data recovery and operational continuity in case of data loss or system failures.

Third-party and Vendor Management

Vendor Security Assessments: Conducts thorough security assessments of vendors and third parties handling sensitive data to ensure compliance with data protection standards.

If the Company has no cyber compliance, how to get started?
Now that we have reviewed what cybersecurity compliance is, it is important to understand how to get started in making a Cybersecurity Compliance Program within your organization. Every cybersecurity compliance program is specific to an organization due to its versatility and depth it covers. However, the steps below should be a great starting point for any organization to begin developing its compliance program and gain the benefits to meet regulatory compliance requirements.

 * 1) Assemble a Designated Compliance Team: The main power behind cybersecurity compliance is your IT staff, however when a comprehensive compliance program is put into place, a compliance team must be formed. For a business to have a strong cybersecurity posture and support compliance procedures, all departments must collaborate.
 * 2) Make a Risk Analysis Process: You should adhere to the four fundamental phases of the risk analysis process in order to identify and evaluate risks. These include determining which information systems, assets, or networks have access to data, determining the risk level associated with each type of data, applying a formula to analyze the risk, and establishing tolerance by selecting whether to reduce, transfer, reject, or accept any identified hazards.
 * 3) Enable Controls to Mitigate or Transfer Risk: Setting up security measures to reduce or transfer cybersecurity threats is the next stage. These measures include encryption, network firewalls, password restrictions, staff training, incident response plans, access control, and patch management schedules, among other technological and physical measures.
 * 4) Create and Implement Policies: Document any policies or instructions that IT teams, staff, and other stakeholders need to follow controls have been put in place. These regulations will also be helpful for future internal and external audits.
 * 5) Monitor and Respond Quickly: Maintain a constant eye on your compliance program as new laws or revised versions of old ones are passed. A compliance program's objective is to recognize and manage risks and stop cyber threats before they result in a significant data breach. Additionally, it's crucial to have business procedures in place that let you respond rapidly to threats.

Industry-Specific Compliance Challenges:
The healthcare sector faces stringent compliance requirements due to the sensitive nature of patient data and the criticality of healthcare services. Organizations in this industry must adhere to regulations such as the Health Insurance Portability and Accountability Act (HIPAA) in the United States. HIPAA mandates strict standards for protecting patient privacy and securing electronic health records (EHRs). Additionally, healthcare organizations must comply with regulations specific to medical device manufacturing, pharmaceuticals, and clinical trials, such as the Food and Drug Administration (FDA) regulations in the U.S. Compliance challenges in healthcare include ensuring the security of EHR systems, safeguarding patient confidentiality, and navigating complex data sharing agreements while maintaining compliance with HIPAA and other industry-specific regulations. The manufacturing sector faces unique compliance challenges related to product safety, environmental regulations, and supply chain management. Manufacturers must comply with regulations such as the Occupational Safety and Health Administration (OSHA) standards for workplace safety, the Environmental Protection Agency (EPA) regulations for waste management and emissions control, and industry-specific standards such as the International Traffic in Arms Regulations (ITAR) for defense-related manufacturing. Compliance challenges in manufacturing include ensuring product quality and safety, minimizing environmental impact, and managing regulatory requirements across global supply chains. The technology sector operates in a rapidly evolving landscape characterized by innovation, disruption, and intense competition. Technology companies must navigate a complex web of regulations that vary depending on their products, services, and geographical locations. Key regulations affecting the technology industry include the General Data Protection Regulation (GDPR) in the European Union, the California Consumer Privacy Act (CCPA) in the U.S., and industry-specific standards such as the International Organization for Standardization (ISO) 27001 for information security management. Compliance challenges in the technology industry include managing vast amounts of customer data, addressing privacy concerns, and ensuring the security of cloud-based services and Internet of Things (IoT) devices. The finance industry operates within a highly regulated environment to ensure the integrity and stability of financial markets and protect consumer interests. Financial institutions, including banks, insurance companies, and investment firms, must comply with regulations such as the Sarbanes-Oxley Act (SOX), the Gramm-Leach-Bliley Act (GLBA), and the Payment Card Industry Data Security Standard (PCI DSS). These regulations govern various aspects of financial operations, including data privacy, anti-money laundering (AML), fraud prevention.
 * Healthcare Industry:
 * Manufacturing Industry:
 * Technology Industry:
 * Finance Industry:


text:
Information Technology and Ethics/Cryptocurrency Overview

Introduction
Cryptocurrencies' experience revolutionized financial manufacturing by introducing a new way to conduct transactions without the want for intermediaries, such as banks or financial institutions. The decentralized nature of cryptocurrencies means that they are not controlled by any central authority, which has made them particularly attractive to individuals and businesses seeking a more unafraid, transparent, and really efficient method of conducting transactions. The concept of cryptocurrency is based on blockchain technology, which is a distributed book that records all transactions in a transparent and immutable way. Each deal is verified by a web of computers called nodes, which use complex algorithms to ensure the authenticity and integrity of the transaction. While Bitcoin was the world-class cryptocurrency, there are now thousands of very different cryptocurrencies uncommitted, apiece with its own unique features and use cases. Some cryptocurrencies are intentional for fasting and affordable transactions, others are unintentional to alleviate composite financial transactions, such as smart contracts. Despite their growing popularity, cryptocurrencies remain a controversial topic due to their association with illegal activities, such as money laundering and tax evasion. However, very many proponents argue that cryptocurrencies make the potential to transmute financial manufacture by providing greater accessibility, transparency, and protection

Definition of cryptocurrency:
Cryptocurrency is a digital currency that is secured and verified using encryption techniques and operates without the involvement of any central authority or government. This allows for greater transparency and autonomy in the network. Cryptocurrencies use decentralized ledger technology, such as blockchain, which creates a permanent and unalterable record of all transactions on the web. The creation of really new units of cryptocurrency is controlled by a protocol, which incentivizes participants to validate transactions and ensure the integrity of the network.

While the anonymity and decentralization of cryptocurrencies make them popular among users, these features also lift concerns about their potential use in very illegal activities. The want of regulation in the cryptocurrency industry has made it really difficult to address these concerns. Additionally, the value of cryptocurrencies can be highly volatile, making them risky investments. However, the really possible benefits of cryptocurrency, such as greater financial inclusivity and faster and cheaper transactions, have led to increasing interest and acceptance of these digital assets.

A brief history of cryptocurrencies:
Cryptocurrencies, which prioritize privacy and certificate in digital transactions, were first conceptualized by David Chaum in the early 1980s. This work paved the way for the creation of the real first cryptocurrency, Bitcoin, which was introduced in 2009 by an unknown person or group known as "Satoshi Nakamoto." Bitcoin's groundbreaking innovation was the use of the decentralized blockchain ledger to verify and record transactions.

Since then, numerous other cryptocurrencies like Litecoin, Ethereum, and Ripple have emerged, sharing the same decentralized and digital characteristics that prioritize security. Despite challenges, including regulatory uncertainty, security concerns, and price volatility, proponents believe that cryptocurrencies represent a revolutionary new organization of money that can raise privacy, security, and financial freedom.

Benefits of using cryptocurrencies:
Cryptocurrencies offer several benefits that traditional banking systems do not. For example, cryptocurrencies use cryptographic algorithms to secure transactions and keep user entropy private, providing greater security. They also operate independently of a central authority, making them immune to government interference or manipulation. This decentralization allows for greater transparency, as transactions on the blockchain are publicly visible, providing accountability.

Additionally, cryptocurrency transactions typically have lower fees compared to traditional banking systems, making them a more cost-effective option. Cryptocurrencies are also accessible to anyone with an internet connection, making them particularly useful for people in underbanked or unbanked regions.

Finally, as cryptocurrencies become more mainstream, they have the potential to appreciate in value, making them a potentially lucrative investment opportunity.

Types of cryptocurrency
There are many types of cryptocurrencies. Since the launch of Bitcoin in 2009, many other cryptocurrencies, commonly referred to as "altcoins," have been developed.

 * 1) Bitcoin(BTC): In the crypto industry, Bitcoin is without any questions in the lead. It was the first cryptocurrency, as well. 2009 saw the birth of Bitcoin, which was created by a single person (or potentially a group) using the identity of Satoshi Nakamoto. Compared to a cap of 21 million, there are probably more than 19 million Bitcoin tokens in use as of June 2022. Every day, over 1,000 new bitcoins are created, bringing the total number of bitcoins to a maximum level. A central bank or any other authority had no plans to control Bitcoin. Instead, it makes use of blockchain technology, a public record that is distributed and holds a digital record of each Bitcoin transaction. Peer-to-peer (P2P) verification, the fundamental cryptography and trust framework that Bitcoin built, is the basis for the majority of current cryptocurrencies. The immutability of the Bitcoin blockchain, which means it cannot be changed in any way, makes it an excellent choice for communicating between two or more people.
 * 2) Ethereum(ETH): A blockchain network is part of Ethereum. Ethereum, however, was built as a flexible blockchain, which means it wasn't made to support a particular currency but rather to let users of the network build, publish, trade, and deploy decentralized applications (dApps). The Ethereum platform's native currency, ether (ETH), was created for use as a means of exchange. To understand ETH more clearly, think of it as the fuel that the Ethereum blockchain runs on. Due to the fact that many ICOs depend on the Ethereum blockchain, Ethereum has been useful in the launch of many ICOs. The growing number of non-fungible tokens (NFTs) is also a result of the Ethereum network. The Ethereum network provides an open-sourced digital architecture so that developers may build and execute applications, or "smart contracts," applying many kinds of system-compatible coins. ETH, the Ethereum network's native cryptocurrency, is used to process payments done on the network by applying various applications developed there.
 * 3) Ripple(XRP): In 2012, the Ripple network and its digital currency, XRP, were introduced. Because it is owned by a single business and is not managed by an independent community, XRP differs from other cryptocurrencies. Also, it does not present itself as an option for standard currencies. Instead, XRP aims to function as a form of third-party currency for international trade between any type of unit of value, such as from cryptocurrencies like Bitcoin to the euro or other official currencies. The basic objective of Ripple is to build a network that allows the fastest and most single-word process for as many transactions as possible. Ripple is trying to draw in businesses interested in the technology, such as major banks, exchange services, and payment providers. With this in mind, it's clear that Ripple fights less with other cryptocurrencies like Bitcoin or Ethereum and more with popular financial infrastructure services like SWIFT.
 * 4) Litecoin(LTC): As one of the original altcoins (alternatives to bitcoin), Litecoin (LTC) is a cryptocurrency that was launched in 2011. Although LTC was developed to be better than BTC, particularly in terms of transaction speed, it is based on the original source code of Bitcoin and shares some features with BTC. Litecoin has changed in value over time, much like many cryptocurrencies (or even some securities and stocks), although being an originally well-liked acceptance into the crypto sector. The Bitcoin blockchain, which is the open-source, digital public ledger that most cryptocurrencies use, has been split to create Litecoin, an independent, peer-to-peer cryptocurrency. Litecoin was created to make it possible for anyone, anywhere in the world, to exchange money with quick, nearly cost-free payments.
 * 5) Dogecoin(DOGE): In 2013, Dogecoin, which is called "dohj-coin," was introduced as a method for simulating Bitcoin. It is known as the first prank cryptocurrency. The currency managed to attract interest from the public as well as some investment. Dogecoin's reputation as a safe cryptocurrency increased after Elon Musk expressed support for the cryptocurrency in a tweet in April 2019. Dogecoin is another cryptocurrency that functions on a blockchain network with a PoW method, much like Bitcoin and Ethereum. However, unlike Bitcoin, which has a maximum of 21 million coins, there is no limit to the number of currencies that can be produced.
 * 6) Solana(SOL): Solana(Sol) is the name of the native currency used by the unique blockchain system Solana. In the real world, one of the best-performing cryptocurrencies is called Sol. By 2021, it increased sharply from less than $5 to about 20 times its original value. Solana provides some of the best technologies for smart contracts, providing a variety of platform-based applications. The Degenerate Ape Academy, a well-known NFT that was introduced in 2021, was also designed by the Solana team.

Usage of Cryptocurrency in Illegal Transactions
In recent years, cryptocurrency has grown in popularity as a means of exchange, owing to its decentralized and anonymous character. This feature enables users to transfer payments without requiring a central authority to monitor the transaction. While this same feature has made cryptocurrencies desirable to respectable users, it has also made them enticing to persons engaging in illicit operations. Criminals that participate in money laundering, tax evasion, cybercrime, terrorism financing, drug trafficking, and other illegal activities can use cryptocurrencies' anonymity to execute their transactions without risk of detection. As a result, law enforcement agencies have found it difficult to identify and prosecute those engaging in these acts.

Illegal activity only accounts for 0.34% of all crypto transactions in 2020, or $10B which is down from 2%, or $21.4B, in 2019.

Ransomware, however, has increased believed to be partially caused by covid-19 increasing work from home. While Ransomware only accounted for 7% of crypto received by criminals, this represents a 311% increase over the year.

Because cryptocurrency is pseudonymous, you can only see where funds were sent but not who sent them, making analysis by companies like Chainalysis easier. This also means that it is an enticing way to launder money or finance terrorist organizations.

In 2019, the PlusToken Ponzi Scheme took over $2B from its victims. PlusToken is based in China and acted as a crypto wallet which would reward users with high rates of return if they bought PLUS tokens using Bitcoin and Ethereum. All in all, 6 individuals connected to the scheme were arrested, however, stolen coins still move through wallets presuming one involved individual is still free.

The main issues that stem from the usage of cryptocurrency in illegal transactions are that legitimate investors will be more wary to get involved as well as some governments making some or all cryptocurrency illegal due to this activity. While only 5.9% of Bitcoin users were involved in illegal activities, this accounts for 30% of all bitcoin activity. “The digital currency market is one of the largest unregulated markets in the world, with about 2,000 different currencies worth about $250 billion and a daily turnover of $60 billion”.

One reason researchers believe that there has been a decrease in illegal bitcoin users is the increase in alternative cryptocurrencies with more anonymity, such as Monero and Dash.

Scams make up most of the crypto related crimes, with the darknet market coming in second.

Money Laundering with Cryptocurrency:
Money laundering is the process of concealing the source of unlawfully obtained funds through the use of legitimate channels. Cryptocurrencies can be used for money laundering since they let users to move funds without requiring approval from a central authority. Furthermore, bitcoin transactions are frequently irreversible and difficult to track, making it difficult for law enforcement to identify the persons engaged in a transaction. The usage of "mixers" or "tumblers" is one method through which criminals can use bitcoin for money laundering. These services enable users to mix their cash with others, making it impossible to track the funds' original source. Criminals can also utilize numerous bitcoin wallets to disguise the monies' trail. The usage of shell corporations is another method that cryptocurrency might be utilized for money laundering. Criminals can create bogus corporations and use them to transfer payments via cryptocurrencies, making it harder for authorities to track the funds' origin and destination.

Drug Trafficking with Cryptocurrency:
Drug traffickers have also used cryptocurrency's anonymity to make unlawful transactions. Drug dealers can transfer payments using cryptocurrency without the requirement for a central authority, making it harder for police to follow the transaction. Law enforcement organizations have discovered multiple incidents of drug traffickers using cryptocurrencies to execute transactions in recent years. For example, the US Department of Justice announced the arrest of many individuals in 2020 who were utilizing cryptocurrencies to launder money gained from narcotics trafficking. The Dark Web, a section of the internet not accessible via standard search engines, has also played a role in the usage of cryptocurrency for drug trafficking. The Dark Web has grown in popularity as a marketplace for illegal items, including drugs, with cryptocurrency as the preferred payment mechanism.

Tax Evasion with Cryptocurrency:
Because of the anonymity and lack of transparency inherent in the technology, cryptocurrency transactions may be utilized for tax avoidance. Because cryptocurrencies are decentralized, users can conduct transactions without the involvement of traditional financial institutions, making it harder for tax authorities to identify and track these transactions. Individuals can use this anonymity to obtain payment for services done without having to report the income to tax authorities. A freelancer who receives paid in cryptocurrencies for their services, for example, may be able to avoid paying taxes on that income by failing to notify it to the tax authorities. Individuals may also utilize bitcoin to conceal income from tax authorities by failing to declare gains from cryptocurrency sales.

Ponzi schemes:
Cryptocurrency Ponzi schemes are a form of fraudulent investment opportunity that frequently promises abnormally large returns to investors who acquire a specific coin. These schemes work by attracting people to invest their money with the promise of quick and big earnings, which are obtained by referring new investors to the plan. As new investors join and invest their money, previous investors' gains are paid out, resulting in a cycle of new investment and payout. These schemes, however, are based on deception and lack a real business model or investment strategy to support the promised returns. Rather, the profits offered to early investors are funded by younger investors' money.As the system grows and more individuals invest, finding new investors to pay out the profits becomes increasingly difficult, eventually leading to the scheme's demise. When a Ponzi scheme fails, investors suffer huge losses and are sometimes left with little to no remedy for reclaiming their money. BitConnect and OneCoin are two noteworthy examples of cryptocurrency Ponzi schemes that have duped investors out of millions of dollars. These schemes used false promises and deceptive marketing to trick people into investing significant quantities of money, resulting in widespread financial devastation for many naïve investors.

Ransomware:
Ransomware is a type of virus that encrypts the victim's files and demands money in exchange for the decryption key. Cybercriminals typically demand payment in cryptocurrency due to the anonymity they provide and the difficulties in tracking them down. The WannaCry ransomware attack, which happened in 2017, is one of the most well-known ransomware attacks. Over 200,000 machines in 150 countries were affected by the attack.

Terrorism Financing with Cryptocurrency:
Because of its anonymity and decentralization, cryptocurrency has the potential to be used to fund terrorist actions. Cryptocurrency transactions are frequently difficult to track, allowing individuals to contribute funds to terrorist organizations without being detected. This feature has made it simpler for terrorist organizations to collect money while evading law enforcement. The potential of cryptocurrency to conduct cross-border transactions easily and without the involvement of traditional financial institutions has made it an appealing instrument for terrorist financing. The bitcoin market's lack of regulation and control has exacerbated the situation by making it simpler for terrorists to use the technology to fund their activities. The United States authorities seized almost $2 million in cryptocurrencies meant to finance terrorist activities in 2021. The monies were tracked back to an extremist group that used cryptocurrencies to support its operations. The seizure was an important accomplishment for law enforcement, demonstrating the possible use of cryptocurrencies in terrorist financing.

Security Risks and Precautions
Security in the field of cryptocurrency is important. With decentralization and borderlessness come a range of security threats, including hacking, theft, scams, and fraud. This chapter will guide you through the risks and precautions you need to know to confidently navigate the cryptocurrency landscape. By understanding the dangers and taking appropriate measures, you can safeguard your investments and enjoy the exciting benefits of this rapidly evolving technology with peace of mind.

Hacking and Theft
Cryptocurrencies are at risk of hacking and theft, posing a major security threat. Online criminals are targeting crypto platforms, including exchanges and wallets, with the aim of stealing digital assets. Once these assets are stolen, untraceable blockchain technology makes a recovery nearly impossible.

 * 1) Phishing Attacks: One common method of stealing cryptocurrencies is phishing attacks. Phishing involves the creation of fraudulent websites and emails by hackers who use social engineering tactics to make them seem genuine. Users are often deceived into giving their login information or private keys by these fake websites or emails. Hackers are able to use this data to get control of the user's digital currencies wallet and send the user's funds to their own accounts.
 * 2) Malware: Hackers usually use malware because it has the ability to seriously damage computer systems. It poses a genuine danger to security since it is designed to interfere with regular operations or inflict harm. Once inside, the hackers can access the system and take the victims' secret keys and login information. To covertly mine cryptocurrency, they can even remotely take control of the computer. By becoming knowledgeable about how to protect your computer, you can defend yourself against these harmful threats.
 * 3) Cryptocurrency Exchanges and Wallets: Investing in cryptocurrency requires security measures to protect against hacking and theft. Hence, it is important to use trusted cryptocurrency exchanges and wallets equipped with robust security features. This consists of encrypting data two-factor authorization, and frequent examinations of security. It is also essential to never share your private keys or login credentials with anyone and to keep them stored securely offline.

Scams and Frauds
Scams and fraud in the cryptocurrency industry have increased in frequency as a result of cryptocurrency's increasing acceptance. Fraudsters take advantage of the anonymity and decentralization of cryptocurrencies to scam investors out of their money. It is important to be aware of the most common cryptocurrency scams and frauds to protect yourself from financial loss.

 * 1) Ponzi Schemes: With the money raised from younger investors, a Ponzi scheme, a deceptive investing plan, pays off previous investors. These scams are widely advertised via social media and many internet platforms with exaggerated claims of financial benefit. Before investing their money, investors perform checks on potential investments and verify their reliability.
 * 2) Fake ICOs: Startups frequently use initial coin offerings (ICOs) to generate money by releasing new coins. However, there are many scam ICOs occurring with the goal to trick investors into trading with money for worthless tokens or coins. Those scam ICOs usually mimic real projects by creating fake websites, social media profiles, and whitepapers. This is why Investors should always do enough investigating to check the reliability of any ICO when setting up an investment.
 * 3) Pump and Dump Schemes: A deceptive strategy designed to artificially boost the value of a specific cryptocurrency is known as a "pump-and-dump scheme," in which false or unclear information is used to spread. This strategy, which is usually made possible by social media platforms, is used to trick unaware buyers into buying cryptocurrencies at inflated rates. Before making an investment in any digital currency, investors should always exercise caution when following financial recommendations on social media.

Storing Cryptocurrencies Safely
Securing cryptocurrencies is a main component of the cryptocurrency industry, demanding the utmost attention. Unlike physical assets that can be held in banks or safes, cryptocurrencies require more advanced and secure storage methods to avoid theft or loss.

 * 1) Hardware Wallets: Hardware wallets are actual items developed to secure the private information needed to access and transfer digital currency. This makes them an exceptionally safe way to store cryptocurrencies since they are offline and secure from online hacking attempts.
 * 2) Cold Storage Methods: Securely storing cryptocurrencies offline can be achieved through cold storage methods. This approach refers to the offline storage of cryptocurrencies in order to prevent unauthorized access or hacking attempts. One popular method of cold storage is by creating paper wallets, which involve generating private keys and storing them in a safe physical location.
 * 3) Multi-Factor Authentication (MFA): Securely storing cryptocurrencies demands the use of multi-factor authentication (MFA). MFA fortifies the protection of cryptocurrency wallets by requiring multiple verifications, such as a password and biometric scan, before providing access. This enhances the security of digital assets and significantly deters unauthorized intrusion. Maximize the security of your cryptocurrency storage with MFA.
 * 4) Updated Software Wallets: Ensuring the safety of your digital assets is important. One way to achieve this is by regularly updating software wallets with the latest security patches and updates. Cybercriminals are constantly seeking out vulnerabilities in these wallets, but by staying up-to-date, their attacks can be avoided. Digital wealth can be secured by keeping the software wallets optimized for safety.
 * 5) Password Security: Ensuring optimal password security is imperative when storing cryptocurrencies. Employing robust and elaborate passwords, utilizing password management tools for password generation and storage, and abstaining from using identical passwords for multiple accounts are all effective measures to forestall the threat of unauthorized access to cryptocurrency wallets.


text:
Category:User rsk

Users in this category indicate they have knowledge of language Pannonian Rusyn.

title: Category:User rsk


text:
User talk:87.37.58.4

Xeverything11 (discuss • contribs) 13:40, 25 April 2023 (UTC)

title: User talk:87.37.58.4


text: User:Xeverything11/background/assets/aisle signage


text:
User:Nira gliro

I'm a tiny change to nom-nom-nom ~Ath says a dormouse.

title: User:Nira gliro


text:
Character Encodings/Code Tables/EBCDIC/EBCDIC 881

IBM code page 881 (CCSID 881) is an EBCDIC code page used in IBM mainframes in the United States to support the English language and the IBM 5080 Graphics System.


text:
Character Encodings/Code Tables/EBCDIC/EBCDIC 882

IBM code page 882 (CCSID 882) is an EBCDIC code page used in IBM mainframes in the United Kingdom to support the English language and the IBM 5080 Graphics System.


text:
Character Encodings/Code Tables/EBCDIC/EBCDIC 883

IBM code page 883 (CCSID 883) is an EBCDIC code page used in IBM mainframes in Sweden to support the Swedish language and the IBM 5080 Graphics System.


text:
Cookbook:Hartshorne Sweet Sauce

Ingredients

 * 2 glasses red wine
 * 1 glass vinegar
 * 3 tsp cullis (strong meat broth)
 * A bit of sugar
 * 1 onion, sliced
 * A little cinnamon
 * 1 bay leaf

Procedure

 * 1) Combine all ingredients in a saucepan.
 * 2) Simmer for 15 minutes.

title: Cookbook:Hartshorne Sweet Sauce


text:
Cookbook:Hartshorne Cream Sauce for a Hare

Ingredients

 * ½ pint cream
 * Hare or venison
 * 2 egg yolks
 * Some onion
 * Butter
 * Flour
 * Salt

Procedure

 * 1) Run the cream over the hare or venison just before frothing it, and catch it in a dish
 * 2) Boil the cream up with the yolks, onion, and a piece of butter rolled in flour and salt.


text:
Cookbook:Hartshorne Catsup for Sea-stores

Ingredients

 * 1 gallon strong stale beer
 * 1 pound pickled anchovies, rinsed
 * 1 pound shallots, peeled
 * ½ ounce mace
 * ½ ounce cloves
 * ¼ ounce whole peppercorns
 * 3–4 large races of ginger
 * 2 quarts large mushroom flaps, rubbed to pieces

Procedure

 * 1) Combine the beer, anchovies, shallots, mace, cloves, peppercorns, ginger, and mushrooms in a pot. Let simmer until reduced by half.
 * 2) Strain through cloth, and cool.

Notes, tips, and variations

 * The stronger and staler the beer the better will be the catsup.
 * Try adding a spoonful of sauce to 1 pound of melted butter to make a fish sauce.


text:
Character Encodings/Code Tables/EBCDIC/EBCDIC 884

IBM code page 884 (CCSID 884) is an EBCDIC code page used in IBM mainframes in Germany to support the German language and the IBM 5080 Graphics System.


text:
Character Encodings/Code Tables/EBCDIC/EBCDIC 885

IBM code page 885 (CCSID 885) is an EBCDIC code page used in IBM mainframes in France to support the French language and the IBM 5080 Graphics System.


text:
Character Encodings/Code Tables/EBCDIC/EBCDIC 886

IBM code page 886 (CCSID 886) is an EBCDIC code page used in IBM mainframes in Italy to support the Italian language and the IBM 5080 Graphics System.


text:
Cookbook:Hartshorne Catsup for Sea-stores II

Ingredients

 * 24 anchovies, boned and chopped
 * 10 shallots, finely chopped
 * 1 handful scraped horseradish
 * ¼ ounce mace
 * 1 quart white wine
 * 1 pint red wine
 * 1 pint water
 * 1 lemon, sliced
 * ½ pint anchovy liquor
 * 12 cloves
 * 12 whole peppercorns

Procedure

 * 1) Combine anchovies, shallots, horseradish, mace, wine, water, lemon, anchovy liquor, cloves, and peppercorns in a saucepan.
 * 2) Boil until reduced to 1 quart, then strain and cool.

Notes, tips, and variations

 * You can make a sauce by combining 2 spoonfuls with 1 pound butter.
 * Try loosening some of the sauce with hot water and thickening with a piece of butter rolled in flour.


text:
Character Encodings/Code Tables/EBCDIC/EBCDIC 887

BM code page 887 (CCSID 887) is an EBCDIC code page used in IBM mainframes in the Japan to support the Japanese language and the IBM 5080 Graphics System.


text:
Character Encodings/Code Tables/EBCDIC/EBCDIC 888

IBM code page 888 (CCSID 888) is an EBCDIC code page used in IBM mainframes in France to support the French language and the IBM 5080 Graphics System. It is a superset of EBCDIC 885.


text:
Character Encodings/Code Tables/EBCDIC/EBCDIC 889

IBM code page 889 (CCSID 889) (Thailand EBCDIC) is an EBCDIC code page with support for Thai script used in IBM mainframes.


text:
Character Encodings/Code Tables/EBCDIC/EBCDIC 890

IBM code page 890 (CCSID 890) is an EBCDIC code page with full code page 330 character set used in IBM mainframes in in the five countries of what was known as Yugoslavia.

Codepage layout
Characters are shown with their equivalent Unicode codes.


text:
User talk:Zeusnighthammer

MT-1
The year is 2222. Humanity has made great strides in science and magic. We have colonized the moon and Mars, and we are on the verge of developing artificial intelligence. However, there is one thing that we have never been able to understand: the true nature of magic.

Magic is a force that seems to defy the laws of physics. It can be used to create illusions, to control the weather, and even to bring people back from the dead. Some people believe that magic is a gift from the gods, while others believe that it is a science that we have yet to fully understand.

One day, a group of Thaumaturges are conducting experiments in a remote laboratory when they make a startling discovery. They find a way to tap into the energy of the universe, and they use this energy to create a new type of technology that allows them to control the forces of nature. This technology is so powerful that it is essentially magic.

The Thaumaturges are overjoyed with their discovery. They believe that this technology has the potential to change the world. However, they soon realize that there is a dark side to magic. The power of magic can be corrupted, and it can be used for evil.

A group of Thaumaturges use the new technology to create a new type of weapon: the corpsewalker plague. This plague is quickly spread across the globe, turning the dead into mindless undead creatures. The corpsewalkers are incredibly strong and resilient, and they can only be killed by destroying their brains. They are a major threat to humanity, and they will stop at nothing to destroy us all.

But there is still hope. A small group of survivors have banded together to fight back against the corpsewalkers. They are using the new technology to create new weapons and defenses, and they are determined to find a cure for the plague.

The battle against the corpsewalkers is long and difficult, but the survivors are not giving up. They know that the fate of the human race hangs in the balance, and they are determined to save the world.

The discovery of magic has changed the world forever. It has given humanity the power to do great things, but it has also given us the power to do great evil. It is up to us to decide how we will use this power. Zeusnighthammer (discuss • contribs) 07:02, 26 April 2023 (UTC)

MT-Zones
Blue Zone: This zone is characterized by no to low levels of zombie activity. There may be a few stragglers here and there, but for the most part, the area is safe to travel through. Resources are relatively plentiful, and there are large settlements that have sprung up. This is a good zone to start to rebuild your life after the apocalypse.

Farming: This is a great way to grow your own food and to become more self-sufficient. Hunting: This is another way to get food, but it is important to be careful when hunting in the zombie-infested world. Fishing: This is a great way to get fresh food, especially if you live near water. Scavenging: This is a good way to find supplies, but it is important to be careful when scavenging in abandoned buildings or in other dangerous areas. Trading: This is a good way to get the supplies you need without having to scavenge or hunt. Building: This is a good way to create a safe place to live and to protect yourself from the zombies. Learning: This is a good way to improve your skills and to prepare for the future.

Yellow Zone: This zone has moderate levels of zombie activity. There are more zombies here than in the Blue Zone, but they are still relatively easy to deal with. Resources are still available, but they are becoming more scarce. There are a few larger settlements in this zone, but they are often under threat from zombies. This is a zone that is best avoided if possible, but it may be necessary to pass through it if you're trying to reach a more desirable location.

Exploring: This is a good way to find new resources and to learn more about the world around you. Repairing a vehicle: This is a good way to travel long distances and to carry more supplies. If you have the skills and tools, you can build a vehicle in the Yellow Zone. Scavenging: This is a good way to find additional food, water, and other supplies in the Yellow Zone. However, they should be careful not to attract zombies. Joining a group: This is a good way to find companionship and to have a better chance of survival. Clearing zombies: This is a good way to protect yourself and your community from the zombies. Settling: Survivors may be able to find a safe place to settle in the Yellow Zone. However, they should be prepared to defend their settlement from zombies.

Red Zone: This zone is characterized by high levels of zombie activity. The streets are filled with zombies, and it is very dangerous to travel through this area without proper preparation. Resources are extremely scarce, and there are no settlements in this zone. This is a zone that should be avoided at all costs.

Raiding: This is a good way to get supplies, but it is also very dangerous. You will need to be well-armed and well-prepared if you want to survive a raid in the Red Zone. Rescuing survivors: This is a noble and dangerous task, but it can be very rewarding. Gathering intelligence: This is a valuable skill that can help you to survive in the Red Zone. Hiding: This is a good way to avoid zombies and other dangers. If you are caught in the Red Zone, it is best to find a safe place to hide and wait for the danger to pass. Zeusnighthammer (discuss • contribs) 15:08, 26 April 2023 (UTC)

MT-Jobs
Alchemist: Alchemists use their knowledge of magic and science to create potions, elixirs, and other magical substances. They could be used to create medicines, weapons, or other tools that would be useful in a post-apocalyptic world.

Artificer: Artificers are skilled in the creation of magical devices, such as golems, weapons, and armor. They could be used to create tools that would help survivors to defend themselves against zombies or to rebuild their world.

Enchanter: Enchanters use their magic to imbue objects with special properties. They could be used to create weapons that are more effective against zombies, or to create armor that is more protective.

Mage: Mages are powerful spellcasters who have studied the arcane arts and can use their magic to control the elements, cast spells, and heal the sick. They could be used to fight zombies, protect survivors, or to help rebuild the world.

Technomancer: Technicians are skilled in the repair and maintenance of machines and devices. They could be used to repair vehicles, weapons, and other equipment that would be essential in a post-apocalyptic world.

Technological alchemists: These alchemists would use their knowledge of magic and science to create new potions, elixirs, and other substances that could be used to heal the sick, protect the living, and destroy the undead. Zeusnighthammer (discuss • contribs) 15:16, 26 April 2023 (UTC)

title: User talk:Zeusnighthammer


text:
User:Vujkoooo

KULINARSTVO Кување је уметност, технологија, наука и занат припреманја хране за конзумацију. Технике кухања и састојци увелико варирају у целом свету, од печења хране на отвореном огњу до употребе електричних штедњака, печења у различитим врстама пећница, одражавајући јединствене еколошке, економске и културне традиције и трендове. Врсте кувања такође зависе од нивоа вештине и обучености кувара. Кување обављају обични људи у њиховим домовима, као и професионални кувари у ресторанима и другим прехрамбеним објектима. Кување се може одвијати путем хемијских реакција без присуства топлоте, попут цевича, традиционалног јужноамеричког јела у коме се риба кува са киселинама у лимуновом или лиметином соку.

LAKA I BRZA TORTA SA MALINAMA I KEKSOM 1.   Maline oprati, pa ocediti od vode. Zatim umutiti šlag po uputstvu na kesici. 2.  Nakon toga pripremiti jedan veći dublji pleh, ili kalup za tortu, pa keks krupno izlomiti i staviti u kalup. Na keks dodati šećer u prahu, pa zatim sipati jogurt i …

GULAŠ SA KOBASICAMA 1.  Krompir, crni luk i šargarepu oljuštiti i oprati. Zatim krompir iseći na krupne kocke, šargarepu na krupnije kolutove, a crni luk na sitnije kockice. Kobasice oprati u toploj vodi, pa skinuti omotač i iseći na krupne kolutove. U veći sud ubaciti kobasice, šargarepu i.

title: User:Vujkoooo


text:
Character Encodings/Code Tables/EBCDIC/EBCDIC 1001

IBM code page 1001 (CCSID 1001) is an EBCDIC code page used in IBM mainframes. It supports MICR (magnetic ink character recognition). Code page 1032 is an extension of this code page.

Codepage layout
Characters are shown with their equivalent Unicode codes.


text: Template:Unichar/hexformat

title: Template:Unichar/hexformat


text:
Professionalism/Sabotage In Academia

Introduction
Academic sabotage is defined as "purposeful vandalism directed against any academic endeavor or equipment". It refers to any actions that undermine or harm another person's academic progress or success. They are also considered to be a lesser-known form of academic dishonesty and is known to be more prevalent among higher education, especially in highly competitive environments such as pre-law or pre-med programs. In contrast to cheating, with its "victimless crime" mentality, academic sabotage does have intended victims.

An article published by Psychology Today identifies the six components of sabotage in academia to be abuse of power, underperforming, noncompliance, professional dishonesty, negativity, and intentional anti-collegial behavior. Causes of academic sabotage were linked to self-interest, personality traits, related personal issues, extraneous stress, managerial practices, and organization culture.

Sabotage can happen between anyone in an academic setting, such as student-student, professor-student, professor-professor, and can even be caused by parents or significant others. However, there is little literature or studies surrounding this phenomenon, aside from personal testimonies or rumors that acknowledge its existence. It is also likely that universities cover up any incidents of academic sabotage to protect their brands and self-interest.

Academic sabotage has also stirred up many concerns toward the ethical and professional values of the perpetrators, especially if they are studying to work in a career field that demands honesty and integrity.

"When all of this started happening, I started to wonder how, if we as future lawyers were supposed to uphold integrity and justice, then how could all of these people be so damn dishonest in their academic life." (Patrick, attorney, age 31)

"...These environments are expected to educate physicians capable of building trust with their patients. If this is the kind of paradigm conspiring from the current medical school system, what does this say about the values of aspiring physicians? Do students truly want to help people and improve the field of medicine, or do some students' motives stop short at the occupation's prestige and high median salary?"

Consequences
Academic sabotage can be considered a serious violation of academic integrity, and punishments can vary depending on the severity of the offense as well as the respective policies of the institution. It can result in an University judicial action or criminal suits charged by the institution. Possible punishment can range from failing the assignment or course, to suspension or expulsion from the academic institution. In addition, the perpetrators may face long-term consequences such as damage to their academic reputation and difficulty getting accepted to future academic programs and institutions.

However, the perpetrators often go unpunished because they are rarely caught. In addition, academic sabotage is not legally considered academic misconduct. That definition is reserved for falsifying data or plagiarism. In the case of someone's experiment being ruined, it can be considered destruction of property.

Prevention and Response
Some academic institutions have taken steps to discourage academic sabotage. For example, Rutgers university lists several sabotage-related actions, such as falsifying evidence or data and destroying another students work, as offenses in their conduct policy that could result in expulsion or suspension.

Studies have been performed in an effort to identify preventative measures against academic sabotage. The results of Psychology Today study involving 23 academics attempted to pinpoint motives of sabotage as a means to find prevention measures. The study recommends that employee training, developing values together as small research groups, and providing means to process the stresses of academia are ways to reduce the risk of someone turning to sabotage.

Vipul Bhrigu and Heather Ames
Heather Ames, an MD PhD student, experienced academic sabotage in her lab at the University of Michigan’s Comprehensive Cancer Center. Ames first noticed signs of sabotage in her cancer cell research in December, 2009, when the results of a routine test on her cells seemed to be out of order. She thought it might have been her own mistake, until the exact same error happened again, five days later. Ames' suspicions grew as she continued to find strange results in her research; in January, she detected an extra protein in her cell samples on two occasions, and in February, she discovered that someone had added ethanol to her cell growth medium, killing all of her samples. After the latter incident, Ames went to her supervisor, Theo Ross, with the strong evidence of sabotage that she had collected, and together they contacted the police.

The first person that the police investigated was Ames herself, under the suspicion that she was staging sabotage in an attempt to justify an obstacle she encountered in her research. After Ames endured two interrogations and a lie detector test, the police began to look elsewhere. They installed security cameras in the lab, and soon after recorded Vipul Bhrigu, a postdoc in Ames’ lab, rummaging around Ames’ samples with a bottle of ethanol. Bhrigu was brought in for questioning and confessed to Sabotaging Ames’ work. He confessed that his motives came from the pressures of moving to a much larger university: "I just got jealous of others moving ahead and I wanted to slow them down."

Bhrigu had originally pleaded guilty of malicious destruction of property, and was sentenced with an $8,800 fine, six months probation, 40 hours of community service, and a psychiatric evaluation. The prosecution pressed for a larger fine to be determined at a later restitution hearing, but Bhrigu and his wife left the country before the hearing took place, as Bhrigu's visa was contingent on having a job. In India, there is little to prevent Bhrigu from returning to a job in science. The situation had a lasting impact on Ames’ and Ross’ trust in the scientific community and in themselves.

This example of sabotage set a very interesting precedent for cases of research misconduct and academic sabotage. In 2011, The U.S. Office of Research Integrity found Bhrigu guilty of research misconduct. Since the federal definition of research misconduct only includes the “fabrication, falsification, or plagiarism” related to research, Bhrigu’s actions do not strictly constitute research misconduct. Bhrigu was found guilty on the grounds that his actions caused. Ames to falsely report results in her lab notebook. Although this precedent represents progress towards more permanent actions against saboteurs in academia, some argue that it does not provide consistent punishment for sabotage-related actions, such as in cases where the results were not written down.

==== Magdelina Koziol ==== Magdalena Koziol was a postdoc student at Yale University, researching how the genome switches on after fertilization when her research began mysteriously failing in July 2011 only a month after starting her postdoc in the developmental biology lab of Antonio Giraldez. The following month, Koziol started producing transgenic zebrafish. All of the batches she produced died and kept dying after several batches were produced. A lab technician assured her there was nothing wrong with her approach. So she decided to produce a batch of fish and split them in two, on one she put her initials, MK, like she had been doing and the other she left unmarked. Within the following days, only the fish with her initials died while the other fish lived. This experiment confirmed for Koziol that someone was interfering with her experiment, so repeating this a second time she convinced Giraldez to set up secret cameras in the lab. It was quickly found that another postdoc, Polloneal Ocbina, had been poisoning her fish. After being caught he was immediately forced to leave Yale; Giraldez told his group not to discuss the incident, threatening Koziol with legal consequences and prosecution should she mention this incident. Her relationship with Giraldez began to quickly deteriorate. He refused to provide her with a letter about the sabotage, which would have helped explain her lack of nine months of data to the Human Frontier Science Program Organization (HFSPO), her grant funder to whom she must make monthly updates, and future employers. He then began to criticize her work and character, didn’t help her make up for the lost time, looked noticeably irritated around her, didn’t list her as a contributor to a Nature article she was participant to, and threatened to "fire and destroy" her. Koziol became depressed, suffered from sleeplessness, and gained weight; when she and Giraldez talked for 3 hours in August 2012, Koziol “cried throughout the meeting,”. She continued there for the duration of her two year fellowship despite it being essentially pointless as she had lost nine months of research, and eventually filed an internal grievance, after which she was promptly told that her fellowship would not be renewed. She filed a lawsuit against Giraldez and Yale, accusing them of negligent and intentional infliction of emotional distress and breach of contract asking for an unspecified amount of compensation for the lost time and funding, and left two months early, returning back to Cambridge University to work under her doctoral supervisor and Nobel laureate John Gurdon. He is a staunch supporter of Koziol, helping her to secure a grant and even using his own personal finances to help keep her research going. He is optimistic about her chances against Yale. “They wrote her a letter promising her circumstances in which she could conduct her research,” he says, “And they quite clearly did not provide even remotely adequate circumstances.”

Future Work
One suggestion for improvements in the chapter can be looking into long-term impacts of academic sabotage for both the victims and culprits. Does the future professional lives of students who learn in sabotage-free environments differ from students who learn in environments prone to sabotages? Another suggestion is to look into how academic sabotage intersects with inclusion and equity. Are certain groups of students more likely to be victims or culprits of academic sabotage and if so, then why? Also, research into current or past activism efforts to change federal or individual school policies surrounding academic sabotage. The role played by student disciplinary defense attorneys is also something of particular interest.

title: Professionalism/Sabotage In Academia