Running Head: IT 659 ab ab ab ab ab ab ab ab ab ab ab ab ab ab a ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab
ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab 1
IT-659-Q1436 Cyberlaw and Ethics
SNHU
IT 659 ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab
ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab 2
Introduction
The cyber law has been introduced to keep a tab on the dangerous crimes
that take place in the cyberspace. It is an important element of the Information
Technology whose importance has increased multifold to have a better control over
the misuse of technology. In the 21st century, the popularity of technology-based
elements like computers, smartphone, tablets and the internet has increased. It has
further intensified the need to have a robust cyberlaw system to strengthen various
activities that are carried out in the cyberspace relating to business, e-commerce and
e-communication (Kamble, 2013, p 1).
The cybercrime is any kind of criminal activity that is carried out in the
cyber world. It is basically an unlawful act that is carried out with the intention to
use any computer as the tool to target a specific set of the cyber users. In order to
have a tight control over the rising cybercrimes, the cyber law includes numerous
principles to safeguard the online users (Leocybersecurity.com, 2018). The core
principle include the need to conduct a thorough risk assessment, implementing a
robust information security program, involving the Board of Directors in the Cyber
Security Management model, designating a competent individual who will be in
charge of the cybersecurity, maintaining a methodical incident response program,
managing the cybersecurity of the third-party vendors, conducting the routine security
training and regularly updating the program. These principles have been designed so
that online activities of the users can be safeguarded and they can conduct the same
in a safe online environment.
A thorough risk assessment is needed for an e-commerce industry so that the
vulnerabilities can be identified. Based on the identification of the assets of the
online business, the information security program needs to be implemented so that
IT 659 ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab
ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab 3
the model can help the business to mitigate the risks. The management team
including the board must be included in the cyber security management process so
that they can make sound decisions and play a role to strengthen the cybersecurity
model. The Chief Information System Officer who must be designated to oversee the
security model must have expertise and experience so that the e-commerce activity
can be conducted in a safe setting. A systematic incident response program must be
in place which can help the business to bring about necessary changes in the
security plans. Since in the e-commerce activity, third-party vendors are involved, it
is necessary to integrate them in the cyber security model. Ultimately, online
businesses must conduct routine security training and regularly updating the program
so that the vulnerability of the business can be kept under check
(Leocybersecurity.com, 2018).
Maersk, the shipping company was the target of one of the nastiest
cyberattacks that cost it millions of dollars. The ‘Notpetya’ ransomware took
advantage of certain security vulnerabilities of the business and prevented individuals
from viewing their data unless they paid $ 300 in bitcoin (Novet, 2018). Maersk’s
operational activities were affected and it was reported that it lost around $ 300
million. This case indicates that the shipping industry is unprotected from potential
cyberattacks (Ship-technology.com, 2018). The attack took place on June 17th and
within a few days crippled its container shipping, oil tanker operations and entire
computer network (Scmagazineuk.com, 2018).
References
Kamble, R. (2013). Cyber Law And Information Technology. Journal Of Scientific &
Engineering Research, 4(5).
IT 659 ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab
ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab ab 4
Leocybersecurity.com (2018). The 8 Principles of Cyber Security Laws - LEO Cyber
Security. Retrieved from https://leocybersecurity.com/the-8-principles-of-cyber-
security-laws/
Novet, J. (2018). Shipping company Maersk says June cyberattack could cost it up
to $300 million. Retrieved from https://www.cnbc.com/2017/08/16/maersk-says-
notpetya-cyberattack-could-cost-300-million.html
Ship-technology.com (2018). Did the Maersk cyber attack reveal an industry
dangerously unprepared? - Ship Technology. Retrieved from https://www.ship-
technology.com/features/maersk-cyber-attack-reveal-industry-dangerously-unprepared/
Scmagazineuk.com (2018). NotPetya attack totally destroyed Maersk's computer
network: chairman.. Retrieved from https://www.scmagazineuk.com/notpetya-attack-
totally-destroyed-maersks-computer-network-chairman/article/1473392
