Running Head: IT 659
1
IT-659-Q1436 Cyberlaw and Ethics
IT 659
2
Introduction
The cyber law has been introduced to keep a tab on the dangerous crimes that
take place in the cyberspace. It is an important element of the Information
Technology whose importance has increased multifold to have a better control over
the misuse of technology. In the 21st century, the popularity of technology-based
elements like computers, smartphone, tablets and the internet has increased. It has
further intensified the need to have a robust cyberlaw system to strengthen various
activities that are carried out in the cyberspace relating to business, e-commerce and
e-communication (Kamble, 2013, p 1).
The cybercrime is any kind of criminal activity that is carried out in the cyber
world. It is basically an unlawful act that is carried out with the intention to use any
computer as the tool to target a specific set of the cyber users. In order to have a
tight control over the rising cybercrimes, the cyber law includes numerous principles
to safeguard the online users (Leocybersecurity.com, 2018). The core principle include
the need to conduct a thorough risk assessment, implementing a robust information
security program, involving the Board of Directors in the Cyber Security Management
model, designating a competent individual who will be in charge of the cybersecurity,
maintaining a methodical incident response program, managing the cybersecurity of
the third-party vendors, conducting the routine security training and regularly updating
the program. These principles have been designed so that online activities of the
users can be safeguarded and they can conduct the same in a safe online
environment.
A thorough risk assessment is needed for an e-commerce industry so that the
vulnerabilities can be identified. Based on the identification of the assets of the online
business, the information security program needs to be implemented so that the model
IT 659
3
can help the business to mitigate the risks. The management team including the board
must be included in the cyber security management process so that they can make
sound decisions and play a role to strengthen the cybersecurity model. The Chief
Information System Officer who must be designated to oversee the security model
must have expertise and experience so that the e-commerce activity can be conducted
in a safe setting. A systematic incident response program must be in place which can
help the business to bring about necessary changes in the security plans. Since in the
e-commerce activity, third-party vendors are involved, it is necessary to integrate them
in the cyber security model. Ultimately, online businesses must conduct routine
security training and regularly updating the program so that the vulnerability of the
business can be kept under check (Leocybersecurity.com, 2018).
Maersk, the shipping company was the target of one of the nastiest
cyberattacks that cost it millions of dollars. The ‘Notpetya’ ransomware took
advantage of certain security vulnerabilities of the business and prevented individuals
from viewing their data unless they paid $ 300 in bitcoin (Novet, 2018). Maersk’s
operational activities were affected and it was reported that it lost around $ 300
million. This case indicates that the shipping industry is unprotected from potential
cyberattacks (Ship-technology.com, 2018). The attack took place on June 17th and
within a few days crippled its container shipping, oil tanker operations and entire
computer network (Scmagazineuk.com, 2018).
References
Kamble, R. (2013). Cyber Law And Information Technology. Journal Of Scientific &
Engineering Research, 4(5).
IT 659
4
Leocybersecurity.com (2018). The 8 Principles of Cyber Security Laws - LEO Cyber
Security. Retrieved from https://leocybersecurity.com/the-8-principles-of-cyber-
security-laws/
Novet, J. (2018). Shipping company Maersk says June cyberattack could cost it up to
$300 million. Retrieved from https://www.cnbc.com/2017/08/16/maersk-says-
notpetya-cyberattack-could-cost-300-million.html
Ship-technology.com (2018). Did the Maersk cyber attack reveal an industry
dangerously unprepared? - Ship Technology. Retrieved from https://www.ship-
technology.com/features/maersk-cyber-attack-reveal-industry-dangerously-unprepared/
Scmagazineuk.com (2018). NotPetya attack totally destroyed Maersk's computer
network: chairman.. Retrieved from https://www.scmagazineuk.com/notpetya-attack-
totally-destroyed-maersks-computer-network-chairman/article/1473392
