Cyber Security Ethics, Law and Policy

Overview

The unit aims to help students operate effectively in the cybersecurity governance arena implementing frameworks and developing policy responses to issues that arise. The unit introduces students to legal frameworks that govern cyber security in Australia and the key governance organisations. Students are also exposed to the General Data Protection Regulation (GDPR) in the European Union and mandatory reporting of data breaches in Australia and the growing body of ICMS including ISO 27K. Students will learn about the changing nature of cyber security threats and the requirement for managers to maintain an up-to-date tool kit in relation to cyber law and policy.

Learning outcomes

Teaching methods

Hawthorn

Assessment

(i) An aggregate mark of 50% or more, and (ii) A pass grade for the non-reportable (pass/fail) test. Students who do not successfully achieve hurdle requirements (ii) will receive a maximum of 45% as the total mark for the unit.

Content

• Laws and legal frameworks that govern cybersecurity and cybercrime in Australia, including the key governance bodies of the internet
• Governance of cybercrime and the internet in Australia and other common law jurisdictions, including the United States, Canada and the European Union (EU)
• national and international laws enacted and proposed on data breaches, management of information, cyber attacks and online privacy 
• ethical issues related to the investigation/prosecution of cybercrime
• legal problems that may arise in business (e.g. privacy requirements, contractual relations and consumer protection) 
• Privacy Act, ISO27,000(K)
• Continuous improvement principles
• Corporate policy
• Policy framework
• Risk acceptance, reduction, transfer and avoidance
• Research methods