Legal Aspects of IT Security [DCYBM101]

Learning outcomes

Hard skills

• Define the basic legal concepts seen in the course
• Identify the legal rules applicable to a factual situation
• Propose a legal solution to a practical case

Soft skills

• Develop accurate and relevant legal reasoning
• Evaluate legal rules in relation to their practical application
• Learn to work and think in groups

Content

The course examines the legal rules that govern the security of networks and information systems. In this context, the course focuses on 4 topics : data protection, cybersecurity, whistleblowing and cybercriminality.

Table of contents

PART 1. PRIVACY & DATA PROTECTION LAW

SUB PART I. GENERAL PRINCIPLES

1. Legal Basis of Privacy

2. Legal Basis of Data Protection Law

3. Introduction to the GDPR: scope and definitions

SUB PART II. DATA PROTECTION LAW (GDPR)

1. Data Protection Principles

2. Duty of security of personal data

3. Appropriates measures in cybersecurity matters

PART 2. INFORMATION AND NETWORKS SECURITY LAW

1. NIS Directive

2. Coordinated vulnerability disclosure policies (CVDP)

PART 3. WHISTLEBLOWING LAW

1. Scope of the DWB

2. Procedure for internal and external reporting

3. Protection measures

PART 4. CYBERCRIMINALITY LAW

1. Intrusion into an IT system

2. Manipulation of IT data

3. IT forgery and IT fraud

4. Crimes concerning the secrecy of communications

Exercises description

No exercises.