Week1_IT659_Assignment_2023-2024_SNHU

Running Head: IT 659 yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy

yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy

yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy 1

IT 659 yy yy yy yy yy y yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy

yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy

Introduction

The cyber law has been introduced to keep a tab on the dangerous

crimes that take place in the cyberspace. It is an important element of the

Information Technology whose importance has increased multifold to have a

better control over the misuse of technology. In the 21st century, the

popularity of technology-based elements like computers, smartphone, tablets and

the internet has increased. It has further intensified the need to have a

robust cyberlaw system to strengthen various activities that are carried out in

the cyberspace relating to business, e-commerce and e-communication (Kamble,

online users (Leocybersecurity.com, 2018). The core principle include the need

to conduct a thorough risk assessment, implementing a robust information

security program, involving the Board of Directors in the Cyber Security

Management model, designating a competent individual who will be in

charge of the cybersecurity, maintaining a methodical incident response

program, managing the cybersecurity of the third-party vendors, conducting the

routine security training and regularly updating the program. These principles

have been designed so that online activities of the users can be safeguarded

and they can conduct the same in a safe online environment.

IT 659 yy yy yy yy yy y yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy

yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy

A thorough risk assessment is needed for an e-commerce industry so

that the vulnerabilities can be identified. Based on the identification of the

assets of the online business, the information security program needs to be

implemented so that the model can help the business to mitigate the risks.

The management team including the board must be included in the cyber

security management process so that they can make sound decisions and

play a role to strengthen the cybersecurity model. The Chief Information

System Officer who must be designated to oversee the security model must

have expertise and experience so that the e-commerce activity can be

be kept under check (Leocybersecurity.com, 2018).

Maersk, the shipping company was the target of one of the nastiest

cyberattacks that cost it millions of dollars. The ‘Notpetya’ ransomware took

advantage of certain security vulnerabilities of the business and prevented

individuals from viewing their data unless they paid $ 300 in bitcoin

(Novet, 2018). Maersk’s operational activities were affected and it was

reported that it lost around $ 300 million. This case indicates that the

shipping industry is unprotected from potential cyberattacks (Ship-

technology.com, 2018). The attack took place on June 17th and within a

IT 659 yy yy yy yy yy y yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy

yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy yy

few days crippled its container shipping, oil tanker operations and entire

computer network (Scmagazineuk.com, 2018).

References

Kamble, R. (2013). Cyber Law And Information Technology. Journal Of

Scientific & Engineering Research, 4(5).

Leocybersecurity.com (2018). The 8 Principles of Cyber Security Laws -

principles-of-cyber-security-laws/

Novet, J. (2018). Shipping company Maersk says June cyberattack could cost

dangerously-unprepared/

Scmagazineuk.com (2018). NotPetya attack totally destroyed Maersk's computer

network: chairman.. Retrieved from https://www.scmagazineuk.com/notpetya-

attack-totally-destroyed-maersks-computer-network-chairman/article/1473392