Running_aa Head:_aa IT_aa 659_aa aa_aa _aa aa_aa a_aa aa_a aa_aa aa_aa _aa aa_aa _aa aa_a aa_aa aa_aa _aa aa_aa _aa aa_ _aa aa_a aa_aa aa_aa
_aa aa_aa a _aa aa_aa aa_a aa_aa aa_ aa_aa aa_a aa_aa a _aa aa_aa aa_ aa_aa aa_ aa_aa _aa aa_a aa_aa aa_aa _aa aa_aa aa_aa aa_aa aa_a aa_aa aa_ aa_aa _aa aa_aa _aa aa_aa
_aa aa_aa a _aa aa_aa aa_ aa_aa _aa aa_aa aa_aa aa_ aa_aa aa_ aa_aa _aa aa_aa _aa aa_aa a _aa aa_a aa_aa aa_a aa_aa aa_ aa_aa aa_a aa_aa aa_aa aa_aa aa_a aa_aa aa_aa _aa
_aa aa_aa a _aa aa_aa aa_ aa_aa _aa aa_aa a _aa aa_aa _aa aa_aa _ a _aa aa_aa aa_ aa_aa aa_ aa_aa _aa aa_a aa_aa aa_aa _aa 1
IT-659-Q1436_aa Cyberlaw_aa and_aa Ethics
IT_aa 659_aa aa_aa _aa aa_aa _aa aa_aa _aa aa_aa aa_ aa_aa _aa aa_aa _aa aa_aa _aa aa_ aa_aa aa_ _aa _aa aa_aa _aa aa_aa a_aa aa_aa _aa aa_aa _aa aa_aa
_aa aa_aa a _aa aa_aa aa_ aa_aa _aa aa_aa a _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_a _aa aa_aa _aa aa_aa _aa aa_a aa_aa aa_aa _aa aa_aa a _aa aa_aa aa_ aa_aa
_aa aa_aa a _aa aa_aa aa_ aa_aa _aa aa_aa a _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_a _aa aa_aa _aa aa_aa _aa aa_a aa_aa aa_aa _aa aa_ aa_aa aa_ aa_aa aa_aa
_aa aa_aa a _aa aa_aa aa_ aa_aa _aa aa_aa a _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_a _aa aa_aa _aa aa_aa _aa aa_a aa_aa aa_aa _aa aa_ aa_aa aa_ aa_aa _aa
_aa aa_aa a _aa aa_aa aa_aa _aa aa_aa _aa aa_aa _aa aa_a aa_aa 2
Introduction_aa
The_aa cyber_aa law_aa has_aa been_aa introduced_ to_aa keep_aa a_aa tab_a on_aa the_
dangerous_aa crimes_aa that_aa take_aa place_a in_aa the_aa cyberspace._aa It_ is_aa an_aa
important_aa element_aa of_aa the_aa Information_aa Technology_aa whose_aa importance_aa has_aa
increased_aa multifold_aa to_aa have_aa a_aa better_aa control_aa over_aa the_aa misuse_aa of_a
technology._aa In_aa the_ 21st_aa century,_aa the_aa popularity_aa of_ technology-based_aa
elements_aa like_aa computers,_aa smartphone,_aa tablets_aa and_aa the_ internet_aa has_aa
increased._aa It_aa has_aa further_aa intensified_aa the_aa need_aa to_aa have_aa a_ robust_aa
cyberlaw_aa system_aa to_aa strengthen_aa various_aa activities_aa that_a are_aa carried_aa out_aa
in_aa the_aa cyberspace_aa relating_aa to_aa business,_aa e-commerce_aa and_aa e-communication_aa
(Kamble,_aa 2013,_aa p_aa 1)._aa
The_aa cybercrime_aa is_aa any_aa kind_aa of_aa criminal_ activity _aa that _a is _aa carried _aa
out_aa in_aa the_ cyber _aa world._aa It_aa is_aa basically_aa an_aa unlawful_a act_aa that_aa is_aa
carried_aa out_aa with_aa the_aa intention_aa to_aa use_aa any_aa computer_aa as_aa the_aa tool_aa to_aa
target_aa a_aa specific_aa set_aa of_aa the_aa cyber_aa users._aa In_aa order_aa to_aa have_aa a_aa tight_aa
control_aa over_aa the_aa rising_aa cybercrimes,_aa the_ cyber_aa law_aa includes_aa numerous_aa
principles_aa to_aa safeguard_aa the_ online _aa users _aa (Leocybersecurity.com, _aa 2018). _aa
The_aa core_aa principle_aa include_a the_aa need_aa to_aa conduct_a a_aa thorough_aa risk_aa
assessment,_aa implementing_aa a_aa robust_ information_aa security_aa program,_aa involving_aa
the_aa Board_aa of_aa Directors_aa in_aa the_aa Cyber_aa Security_aa Management_aa model,_aa
designating_aa a_aa competent_a individual_aa who_ will_aa be_aa in_aa charge_aa of_aa the_aa
cybersecurity,_aa maintaining_aa a_aa methodical_aa incident_aa response_aa program,_aa
managing_aa the_aa cybersecurity_aa of_aa the_aa third-party_aa vendors,_aa conducting_aa the_aa
routine_aa security_aa training_aa and_aa regularly_aa updating_aa the_aa program._aa These_aa
principles_aa have_aa been_aa designed_aa so_aa that_aa online_a activities_aa of_aa the_aa users_aa
IT_aa 659_aa aa_aa _aa aa_aa _aa aa_aa _aa aa_aa aa_ aa_aa _aa aa_aa _aa aa_aa _aa aa_ aa_aa aa_ _aa _aa aa_aa _aa aa_aa a_aa aa_aa _aa aa_aa _aa aa_aa
_aa aa_aa a _aa aa_aa aa_ aa_aa _aa aa_aa a _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_a _aa aa_aa _aa aa_aa _aa aa_a aa_aa aa_aa _aa aa_aa a _aa aa_aa aa_ aa_aa
_aa aa_aa a _aa aa_aa aa_ aa_aa _aa aa_aa a _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_a _aa aa_aa _aa aa_aa _aa aa_a aa_aa aa_aa _aa aa_ aa_aa aa_ aa_aa aa_aa
_aa aa_aa a _aa aa_aa aa_ aa_aa _aa aa_aa a _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_a _aa aa_aa _aa aa_aa _aa aa_a aa_aa aa_aa _aa aa_ aa_aa aa_ aa_aa _aa
_aa aa_aa a _aa aa_aa aa_aa _aa aa_aa _aa aa_aa _aa aa_a aa_aa 3
can_aa be_aa safeguarded_aa and_aa they_aa can_aa conduct_aa the_aa same_aa in_aa a_aa safe_aa
online_aa environment._aa
A_aa thorough_aa risk_aa assessment_aa is_aa needed_aa for_aa an_aa e-commerce_aa
industry_aa so_aa that_aa the_aa vulnerabilities_aa can_aa be_aa identified._aa Based_aa on_aa the_a
identification_aa of_aa the_aa assets_aa of_aa the_aa online_aa business,_aa the_ information _aa
security_aa program_aa needs_aa to_aa be_a implemented_aa so_aa that_a the_aa model_aa can_a
help_aa the_aa business_aa to_aa mitigate_aa the_aa risks._aa The_aa management_aa team_aa
including_aa the_aa board_aa must_aa be_aa included_aa in_aa the_aa cyber_aa security_aa
management_aa process_aa so_aa that_aa they_a can_aa make_aa sound_aa decisions_aa and_aa play_aa
a_aa role_ to_aa strengthen_aa the_aa cybersecurity_aa model._aa The_ Chief_aa Information_aa
System_aa Officer_aa who_ must_ be_ designated_aa to_aa oversee_aa the_aa security_aa
model_aa must_aa have_aa expertise_aa and_ experience _aa so_aa that_aa the_aa e-commerce_aa
activity_aa can_aa be_aa conducted_aa in_aa a_aa safe_aa setting._aa A_aa systematic_aa incident_a
response_aa program_aa must_aa be_aa in_aa place_aa which_aa can_aa help_aa the_aa business_aa to _aa
bring_aa about_aa necessary_aa changes_ in _aa the _aa security _aa plans. _aa Since_aa in_a the_aa e-
commerce_aa activity,_aa third-party_aa vendors_aa are_aa involved,_aa it_aa is_aa necessary_aa to_aa
integrate_aa them_aa in_aa the_aa cyber_aa security_aa model._aa Ultimately,_aa online_aa
businesses_aa must_a conduct_aa routine_aa security_ training_ and _ regularly_aa updating_a
the_aa program_aa so_aa that_aa the_aa vulnerability_aa of_aa the_aa business_ can_aa be_aa kept_aa
under_aa check_aa (Leocybersecurity.com,_aa 2018)._aa
Maersk,_aa the_ shipping_aa company_a was_ the_aa target_aa of_aa one_a of_ the_
nastiest_aa cyberattacks_aa that_aa cost_aa it_aa millions_aa of_aa dollars._aa The_aa ‘Notpetya’_aa
ransomware_aa took_aa advantage_aa of_aa certain_aa security_aa vulnerabilities_aa of_aa the_aa
business_aa and_aa prevented_aa individuals_aa from_aa viewing_aa their_aa data_aa unless_aa they_aa
paid_aa $_aa 300_aa in_aa bitcoin_aa (Novet,_aa 2018)._aa Maersk’s_aa operational_aa activities_aa
IT_aa 659_aa aa_aa _aa aa_aa _aa aa_aa _aa aa_aa aa_ aa_aa _aa aa_aa _aa aa_aa _aa aa_ aa_aa aa_ _aa _aa aa_aa _aa aa_aa a_aa aa_aa _aa aa_aa _aa aa_aa
_aa aa_aa a _aa aa_aa aa_ aa_aa _aa aa_aa a _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_a _aa aa_aa _aa aa_aa _aa aa_a aa_aa aa_aa _aa aa_aa a _aa aa_aa aa_ aa_aa
_aa aa_aa a _aa aa_aa aa_ aa_aa _aa aa_aa a _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_a _aa aa_aa _aa aa_aa _aa aa_a aa_aa aa_aa _aa aa_ aa_aa aa_ aa_aa aa_aa
_aa aa_aa a _aa aa_aa aa_ aa_aa _aa aa_aa a _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_aa _aa aa_a _aa aa_aa _aa aa_aa _aa aa_a aa_aa aa_aa _aa aa_ aa_aa aa_ aa_aa _aa
_aa aa_aa a _aa aa_aa aa_aa _aa aa_aa _aa aa_aa _aa aa_a aa_aa 4
were_aa affected_aa and_aa it_aa was_aa reported_aa that_aa it_a lost_aa around_aa $_aa 300_aa
million._aa This_aa case_aa indicates_aa that_aa the_aa shipping_aa industry_aa is_aa unprotected_aa
from_aa potential_aa cyberattacks_aa (Ship-technology.com,_aa 2018)._aa The_aa attack_aa took_aa
place_aa on_a June_aa 17th_aa and_aa within_aa a_aa few_aa days_aa crippled_a its_aa container_aa
shipping,_aa oil_aa tanker_aa operations_aa and_aa entire_aa computer_aa network_aa
(Scmagazineuk.com,_aa 2018)._aa
References
Kamble,_aa R._aa (2013)._aa Cyber_aa Law_aa And_aa Information_aa Technology._aa Journal_
Of_aa Scientific_aa &_aa Engineering_aa Research,_ 4(5).
Leocybersecurity.com_aa (2018)._aa The_aa 8_aa Principles_aa of_aa Cyber_aa Security_aa Laws_aa -
_aa LEO _aa Cyber _aa Security._aa Retrieved_aa from_aa https://leocybersecurity.com/the-8-
principles-of-cyber-security-laws/
Novet,_aa J._aa (2018)._aa Shipping_aa company_aa Maersk_aa says_aa June_aa cyberattack_aa
could_aa cost_aa it_aa up_aa to_aa $300_aa million._aa Retrieved_aa from_aa
https://www.cnbc.com/2017/08/16/maersk-says-notpetya-cyberattack-could-cost-300-
million.html
Ship-technology.com_aa (2018)._aa Did_aa the_ Maersk_aa cyber_aa attack_ reveal_aa an_aa
industry_aa dangerously_aa unprepared?_aa -_aa Ship_aa Technology._aa Retrieved_aa from_aa
https://www.ship-technology.com/features/maersk-cyber-attack-reveal-industry-
dangerously-unprepared/
Scmagazineuk.com_aa (2018)._aa NotPetya_aa attack_aa totally_aa destroyed_aa Maersk's_aa
computer_aa network:_aa chairman.._aa Retrieved_aa from_aa
https://www.scmagazineuk.com/notpetya-attack-totally-destroyed-maersks-computer-
network-chairman/article/1473392
