Running Head: IT 659 ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad
ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad
1
IT-659-Q1436 Cyberlaw and Ethics
IT 659 ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad a ad ad ad ad ad ad ad ad ad ad
ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad
ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad 2
Introduction
The cyber law has been introduced to keep a tab on the dangerous crimes
that take place in the cyberspace. It is an important element of the Information
Technology whose importance has increased multifold to have a better control
over the misuse of technology. In the 21st century, the popularity of technology-
based elements like computers, smartphone, tablets and the internet has increased.
It has further intensified the need to have a robust cyberlaw system to strengthen
various activities that are carried out in the cyberspace relating to business, e-
commerce and e-communication (Kamble, 2013, p 1).
The cybercrime is any kind of criminal activity that is carried out in the
cyber world. It is basically an unlawful act that is carried out with the intention
to use any computer as the tool to target a specific set of the cyber users. In
order to have a tight control over the rising cybercrimes, the cyber law includes
numerous principles to safeguard the online users (Leocybersecurity.com, 2018).
The core principle include the need to conduct a thorough risk assessment,
implementing a robust information security program, involving the Board of
Directors in the Cyber Security Management model, designating a competent
individual who will be in charge of the cybersecurity, maintaining a methodical
incident response program, managing the cybersecurity of the third-party vendors,
conducting the routine security training and regularly updating the program. These
principles have been designed so that online activities of the users can be
safeguarded and they can conduct the same in a safe online environment.
A thorough risk assessment is needed for an e-commerce industry so that
the vulnerabilities can be identified. Based on the identification of the assets of
the online business, the information security program needs to be implemented so
IT 659 ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad a ad ad ad ad ad ad ad ad ad ad
ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad
ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad 3
that the model can help the business to mitigate the risks. The management team
including the board must be included in the cyber security management process
so that they can make sound decisions and play a role to strengthen the
cybersecurity model. The Chief Information System Officer who must be
designated to oversee the security model must have expertise and experience so
that the e-commerce activity can be conducted in a safe setting. A systematic
incident response program must be in place which can help the business to bring
about necessary changes in the security plans. Since in the e-commerce activity,
third-party vendors are involved, it is necessary to integrate them in the cyber
security model. Ultimately, online businesses must conduct routine security training
and regularly updating the program so that the vulnerability of the business can
be kept under check (Leocybersecurity.com, 2018).
Maersk, the shipping company was the target of one of the nastiest
cyberattacks that cost it millions of dollars. The ‘Notpetya’ ransomware took
advantage of certain security vulnerabilities of the business and prevented
individuals from viewing their data unless they paid $ 300 in bitcoin (Novet,
2018). Maersk’s operational activities were affected and it was reported that it lost
around $ 300 million. This case indicates that the shipping industry is unprotected
from potential cyberattacks (Ship-technology.com, 2018). The attack took place on
June 17th and within a few days crippled its container shipping, oil tanker
operations and entire computer network (Scmagazineuk.com, 2018).
References
Kamble, R. (2013). Cyber Law And Information Technology. Journal Of Scientific
& Engineering Research, 4(5).
IT 659 ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad a ad ad ad ad ad ad ad ad ad ad
ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad
ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad 4
Leocybersecurity.com (2018). The 8 Principles of Cyber Security Laws - LEO
Cyber Security. Retrieved from https://leocybersecurity.com/the-8-principles-of-
cyber-security-laws/
Novet, J. (2018). Shipping company Maersk says June cyberattack could cost it
up to $300 million. Retrieved from https://www.cnbc.com/2017/08/16/maersk-
says-notpetya-cyberattack-could-cost-300-million.html
Ship-technology.com (2018). Did the Maersk cyber attack reveal an industry
dangerously unprepared? - Ship Technology. Retrieved from https://www.ship-
technology.com/features/maersk-cyber-attack-reveal-industry-dangerously-unprepared/
Scmagazineuk.com (2018). NotPetya attack totally destroyed Maersk's computer
network: chairman.. Retrieved from https://www.scmagazineuk.com/notpetya-
attack-totally-destroyed-maersks-computer-network-chairman/article/1473392
