Here is the background info: My intellectual journey began when I realized there were specific aspects to the I.T./System Administration profession that I still needed to fully comprehend or be knowledgeable about. I wanted to avoid doing anything technical, leading me to remember confidentiality and security structures from classes and certification practices. Delving further into the field, I became particularly interested in confidentiality, security structures, and proper procedures and ethics when handling data and confidential information. Being well-versed in best practices for data handling and maintaining security structures within an organization is crucial. This prompted me to investigate the following research question, “What is the appropriate conduct for I.T./System Administration professionals in their interaction with and access to data?”
           Diving into various sources such as the EBSCO and U.H. library search, I found more information to help me form a thesis and ultimately support what I believe are guidelines that can be implemented in most organizations. I mainly found codes of ethics, business suggestions, and studies and reports on security guidelines and risk management. I learned that I.T./System Administration professionals must adhere to specific security protocols to preserve the integrity of their organization’s data. These protocols usually consisted of not breaking established security fields within an organization and implementing procedures and policies that maintain security without disrupting workflow. This necessitates a dedication to ongoing learning and professional growth and a comprehension of the ethical consequences of their work. This necessitates dedication to ongoing learning, accreditations, professional growth, and comprehending their work’s ethical and regulatory consequences.
           As I progressed in gathering information for my thesis, I became increasingly aware of the crucial role ethics and conducted play in the technology sector. I think it is essential for organizations to put guidelines in place that ensure their I.T./System Administration professionals are acting by the organization’s values. These guidelines should be grounded in best practices while considering the unique needs and challenges of the organization. Additionally, I identified the significance of cultivating a culture of accountability and responsibility within organizations. IT/System Administration professionals must remain vigilant and recognize the potential risks of mishandling sensitive data. Companies, in turn, would benefit from fostering a supportive environment that encourages open communication and feedback, empowering employees to advance their knowledge and improve their practices.
           My research has given me a more profound understanding of the significance of confidentiality, security structures, and professional conduct within the technology industry. Through research, I understand and can appreciate the more intricate issues involved and the importance of continuous learning and development in this field. I hope that my thesis will contribute to a better understanding of best practices for I.T./System Administration professionals and subsequently result in enhanced security and ethical standards for those in adjacent fields along with me in future preparation.
	As I prepare to enhance my knowledge further, I remain committed to promoting the necessity of comprehensive training programs and professional development opportunities. By encouraging individuals to explore new trends, emerging technologies, and innovative approaches, we can strive towards creating a more secure, ethical, and proficient technology landscape.
Annotated Bibliography
Akman, Ibrahim, and Alok Mishra. “Ethical Behavior Issues in Software Use: An Analysis of Public and Private Sectors.” Computers in Human Behavior, vol. 25, no. 6, Nov. 2009, pp. 1251–57. EBSCOhost, https://doi-org.ezproxy.lib.uh.edu/10.1016/j.chb.2009.07.006.
	The article by Akman and Mishra (2009) delves into the ethical behavior issues related to software used within the public and private sectors, providing valuable insights into best practices for IT and system administration professionals in handling data and maintaining confidentiality and security structures within organizations. Through a survey, the authors assess ethical concerns associated with unauthorized software use, discovering employees' general lack of awareness about the ethical implications of their actions. The study underlines the importance of fostering awareness and education among employees concerning the consequences of software use, emphasizing that system administrators play a crucial role in ensuring adherence to ethical guidelines. By raising employees' awareness, IT professionals can help establish a culture that values data privacy, security, and ethical behavior in software usage. While not directly addressing data privacy and security methodologies or guidelines for system administrators, the study provides insights into essential aspects of IT management. By promoting ethical behavior among employees, IT professionals can create a culture that values data privacy, security, and responsible software usage. In conclusion, this article underlines the need for IT and system administration professionals to focus on increasing employee awareness and education to maintain confidentiality and security structures within organizations. The findings serve as a valuable resource for understanding the ethical dimensions of software use and their implications in managing data privacy and security.
Austin, Robert D., and Christopher A.R Darby. “The Myth of Secure Computing.” Harvard Business Review, 1 Aug. 2014, https://hbr.org/2003/06/the-myth-of-secure-computing.
	In the article “The Myth of Secure Computing,” Austin and Darby argue that conventional cybersecurity risk management strategies, which focus on identifying and managing risks, are no longer effective in the ever-changing threat landscape. This perspective contrasts with the view that IT professionals should rely on accreditation and continuous training to maintain data confidentiality and security structures in organizations. The authors propose a more flexible, adaptive approach to cybersecurity to better respond to emerging threats rather than relying solely on rigid risk management frameworks. Although the article acknowledges the need for IT professionals to stay current with the latest threats and best practices, it prioritizes adaptability and constant evolution over a strict reliance on formalized risk assessment and management processes. Recognizing the limitations of traditional risk management approaches in cybersecurity is essential. However, adapting and evolving to new challenges without abandoning established risk management processes remains critical. To the question, this source suggests that best practices for IT and systems administration professionals should include obtaining necessary accreditation and training and embracing a more flexible, proactive approach to cybersecurity management. While the authors challenge the effectiveness of traditional risk management, their perspective supports the importance of developing a multifaceted security strategy that combines both traditional risk management and openness to constant evolution and adaptation.
Dhirani, Lubna Luxmi, et al. “Ethical Dilemmas and Privacy Issues in Emerging Technologies: A Review.” Sensors (14248220), vol. 23, no. 3, Feb. 2023, p. 1151. EBSCOhost, https://doi-org.ezproxy.lib.uh.edu/10.3390/s23031151.
	The review by Dhirani et al. explores the ethical dilemmas and privacy issues associated with new and emerging technologies, offering valuable insights for I.T. and System Administration professionals on handling data and maintaining confidentiality and security structures within organizations. The authors discuss the challenges of addressing ethical concerns and establishing best practices in a rapidly evolving technological landscape. A vital aspect of the article is acknowledging “gray areas” in which ethical standards might be unclear or still under development. The authors emphasize the importance of formulating adaptable guidelines and procedures for the security field to accommodate these continuous changes, ensuring that organizations are prepared to navigate the complexities and uncertainties of emerging technologies. Furthermore, the review highlights the need for I.T. professionals and those in related roles to balance embracing innovative technologies and adhering to ethical and regulatory standards. This involves developing a keen understanding of emerging technologies’ ethical dimensions and dilemmas and finding ways to responsibly mitigate potential legal and regulatory issues. This article is a valuable resource for understanding the various challenges and complexities of maintaining data confidentiality and security structures in an ever-changing technological environment. By focusing on the ethical aspects of emerging technologies, the review provides essential guidance for formulating best practices in handling data, ensuring confidentiality, and maintaining security structures in organizations employing innovative technology.
Koskosas, Ioannis. “Goal Setting and Trust in a Security Management Context.” Information Security Journal: A Global Perspective, vol. 17, no. 3, May 2008, pp. 151–61. EBSCOhost, https://doi-org.ezproxy.lib.uh.edu/10.1080/19393550802290337. 
	Koskosas’ article focuses on the essential aspects of goal setting and trusts in the context of security management, providing valuable insights for I.T. and System Administration professionals handling data and maintaining confidentiality and security structures within organizations. The author examines information security practices from a people-centric and socio-organizational perspective, emphasizing the importance of striking a balance between information security and the impact of security measures on employees’ workflows and productivity. The article highlights the challenge of implementing security measures that do not create excessive inconvenience or disruption for employees. Koskosas suggests that I.T. professionals must carefully consider people's tolerance towards security measures and find ways to minimize the adverse effects of these measures on employees’ daily routines and overall job satisfaction. A crucial aspect of the research is trusting management in information systems. The author emphasizes the need for I.T. professionals to create a culture of trust to ensure employees comply with security policies and understand the importance of data confidentiality and security in maintaining the organization’s reputation and operational success. In conclusion, Koskosas’ article comprehensively examines goal setting and trust in I.T. professionals’ role in handling data and maintaining confidentiality and security structures within organizations. By considering both the individual users' and organizational perspectives, I.T. professionals can better understand the challenges and opportunities in implementing effective information security practices that prioritize the welfare of employees while maintaining the overall security and confidentiality of the organization’s data.
Lundgren, Björn, and Niklas Möller. “Defining Information Security.” Science & Engineering Ethics, vol. 25, no. 2, Apr. 2019, pp. 419–41. EBSCOhost, https://doi-org.ezproxy.lib.uh.edu/10.1007/s11948-017-9992-1. 
	Lundgren and Möller’s article explores the definition of information security and the connections between what they term ‘soft issues,’ such as humans, organizations, culture, ethics, policies, and law. The authors elaborate on the people-centric side of information security, providing insights for I.T. and system administration professionals regarding best practices in handling data and maintaining confidentiality and security structures within organizations. The article emphasizes the importance of considering the human element and organizational context when addressing information security challenges. By acknowledging the role of culture, ethics, and policy in shaping security practices, I.T. professionals can better understand how to develop and implement effective strategies considering the diverse factors influencing information security. In conclusion, the study by Lundgren and Möller offers valuable insight into the multidimensional nature of information security, highlighting the need for a holistic approach that considers both technical and human aspects in maintaining confidentiality and security structures. By delineating the connection between ‘soft issues’ and information security, the authors contribute to understanding best practices for I.T. and System Administration professionals in managing data and ensuring security within organizations.
Marcu, Daniela, et al. “Software Engineering Ethics.” Postmodern Openings, vol. 11, no. 4, 2020, pp. 248–61, https://doi.org/10.18662/po/11.4/233. 
	The article by Marcu et al. focuses on the role of computer and software applications in various industries, emphasizing the need to regulate I.T. activities through law and ethical principles. The authors discuss how ethical principles are reinforced through legislation and explore the significance of vocational training, accreditation, licensing, and code of ethics in promoting ethical behavior among I.T. professionals. About my research question, this source offers valuable insight into the importance of legal and ethical frameworks in guiding I.T. and System Administration professionals in handling data and maintaining confidentiality and security structures within organizations. By adhering to established principles and relevant laws, I.T. professionals can ensure that they implement best practices that protect sensitive information and promote responsible behavior in the field. In conclusion, Marcu et al.’s study highlights the critical role of legal and ethical guidelines in forming best practices for I.T. and system administration professionals. By understanding the implications of these guidelines and how they can be upheld, such as vocational training and accreditation, I.T. professionals can develop and maintain data confidentiality and security structures within organizations compliant with ethical and legal standards.
Preimesberger, Chris. “How to Manage Security for an Enterprise’s Human Endpoints.” EWeek, Sept. 2015, p. 1. EBSCOhost,
search.ebscohost.com/login.aspx?direct=true&db=a9h&AN=109905201&site=ehost-live.
Preimesberger’s article offers valuable insights into managing security for human endpoints within organizations, emphasizing the importance of employee training, advanced security policies, and innovative security technologies in ensuring that system administrators follow ethical guidelines. The article underscores the significance of continuous training in reinforcing ethical practices among employees and maintaining confidentiality and security structures in the organization. The author highlights that by consistently updating security policies and procedures and adopting advanced security technologies, organizations can reduce the risk of security breaches and promote ethical behavior among IT professionals. In addition, Preimesberger emphasizes the value of periodic training sessions to refresh employees’ knowledge and instill a culture of ethical conduct. In conclusion, this source provides essential information for understanding the challenges faced by IT and system administration professionals in handling data and maintaining confidentiality and security structures within organizations. By emphasizing the role of employee training, advanced security policies, and innovative technologies, Preimesberger’s article offers guidance on best practices for ensuring system administrators abide by ethical guidelines and organizations maintain the highest standards of data protection and security.
Reflection and Tentative Thesis
	In conclusion, the complex landscape of data privacy, confidentiality, and technological security presents numerous ethical challenges for I.T. and System Administration professionals. Based on my extensive research, a multi-faceted approach involving constant training, accreditations, clear and concise guidelines, and minimally intrusive procedures offers the best overall strategy for handling data and maintaining confidentiality and security structures in organizations across various industries. My tentative thesis is as follows, to address the ethical challenges associated with data handling and security in the evolving digital landscape, I.T., and system administration professionals, like myself, should adopt a comprehensive approach that includes continuous training, relevant accreditations, unambiguous guidelines, and non-disruptive procedures which collectively contribute to a secure and responsible data management environment, ensuring the protection of sensitive information while promoting productivity within the organization. Although alternative perspectives, such as the Harvard Business Review’s argument against traditional risk management in favor of a more fluid and adaptive approach, may offer some insights into adapting to the ever-changing cyber threat landscape, I believe it is crucial not to disregard the importance of well-established risk management practices. The optimal cybersecurity strategy should balance embracing agility and innovation in response to emerging threats and maintaining a foundation of robust risk identification and mitigation practices. By committing to continuous education, a clear ethical framework, and unobtrusive security measures, I.T. professionals like me can effectively navigate the legal and regulatory landscape surrounding data privacy and security. I am confident that this integrated approach ensures not only the protection of sensitive information but also uphold the organizational reputation and operational success, ultimately fostering a culture of ethical behavior and excellence in information technology and system administration. 
Here's what I have so far for the essay: What are the Best Practices for I.T./System Administration Professionals to Handle Data and Maintain Confidentiality and Security Structures in Organization?
In today’s ever-evolving digital landscape, the information technology and system administration (I.T./S.A.) professionals face numerous ethical challenges associated with data handling and security, as businesses become increasingly reliant on technology to manage sensitive information, establishing, and maintaining a secure and responsible data management environment has become paramount. In order to address the ethical challenges associated with data handling and security in the evolving digital landscape, I.T., and system administration professionals, like myself, should adopt a comprehensive approach that includes continuous training, relevant accreditations, unambiguous guidelines, and non-disruptive procedures which collectively contribute to a secure and responsible data management environment, ensuring the protection of sensitive information while promoting productivity within the organization. This integrated approach ensures not only the protection of sensitive information but also uphold the organizational reputation and operational success, ultimately fostering a culture of ethical behavior and excellence in information technology and system administration. With a commitment to the integrated approach, I.T. professionals along with those who handle confidential information or data in other industries would be able to effectively navigate the legal and regulatory landscape surrounding data privacy and security. 
Continuous training is critical in ensuring that I.T./S.A. professionals are up to date with the latest technological advancements, security threats, and best practices (Preimesberger 1). As technology evolves, new vulnerabilities and potential breaches are constantly discovered, requiring professionals to adapt and respond effectively. Staying abreast of these changes enables I.T./S.A. professionals to establish a culture of ethical behavior that prioritizes data privacy and security (Marcu et al. 256). By emphasizing the role of employee training. I.T. professionals can develop and maintain data confidentiality and security structures within organizations that comply with ethical and legal standards
Instructions: compose a 600-900 word (2-3 pages) 
Continue on from what I already have and complete the instructions