Legal Aspects of Information and CybersecuritySillabus

Fənn kodu

İF-61408y-EN

Kredit

5

Tələbənin iş yükü

130

Semestr

Yaz semestri

Akademik il

2

Fənnin tipi

Məcburi

Təhsil forması

Əyani

Tədris dili

İngilis

Auditoriyadaxili saatlar

Lectures: 30 hours; Seminars: 30 hours

Auditoriyadan kənar saatlar

Student independent work: 90 hours; Project work / consultation hours: 40 hours

The course “Legal Aspects of Information and Cybersecurity” examines the fundamental legal norms, principles, and mechanisms governing relations in the field of information and cybersecurity. The course covers legislation related to information protection and personal data, legal foundations for the use of information systems and digital technologies, confidentiality, electronic documents, and digital evidence. It also addresses the legal aspects of preventing and investigating cybercrimes, liability for violations of information security requirements, copyright, and intellectual property in the digital environment. Particular attention is paid to international, regional, and national legal and regulatory acts governing information and cybersecurity, as well as the practical application of legal requirements in organizational activities.

• mühazirə
• seminar
• təqdimatlar
• interaktiv müzakirə
• komanda işi

1. 1

   CLO 1: Acquire knowledge of the fundamentals of information law, its sources, elements of legal relations, and subjects of legal norms, as well as understand the fundamental rights and freedoms of individuals in the information sphere.

2. 2

   CLO 2: Understand the main directions of the state policy of the Republic of Azerbaijan in the information sphere, relevant strategies and state programs, as well as national interests and information security policy.

3. 3

   CLO 3: Identify the main legal and regulatory acts governing information and cybersecurity and understand their key requirements.

4. 4

   CLO 4: Demonstrate general knowledge of the legal and organizational aspects of protecting critical information infrastructure, including the classification of infrastructure objects, minimum security requirements, and control mechanisms.

5. 5

   CLO 5: Understand the requirements of applicable legislation concerning the protection of personal data, state secrets, confidential information, professional, commercial, investigative, and judicial secrets, as well as the liability established for violations of applicable legal requirements.

6. 6

   CLO 6: Understand the concept and classification of cybercrimes, the legal foundations for combating cybercrime, and the concepts of information warfare and cyberwarfare, including their characteristics, contemporary challenges, and legal aspects of hybrid warfare.

1. 1.
   Introduction. Legal System of the Republic of AzerbaijanMühazirə

   This topic introduces the legal system of the Republic of Azerbaijan and its structure, principles, and main sources of law. It examines the hierarchy of legal and regulatory acts, the role of the Constitution, laws, presidential decrees, regulations, and other legal instruments. Particular attention is given to the relationship between the national legal system and the regulation of information and cybersecurity.

2. 2.
   Legal System of the Republic of AzerbaijanMühazirə

   This topic introduces the legal system of the Republic of Azerbaijan and its structure, principles, and main sources of law. It examines the hierarchy of legal and regulatory acts, the role of the Constitution, laws, presidential decrees, regulations, and other legal instruments. Particular attention is given to the relationship between the national legal system and the regulation of information and cybersecurity.

3. 3.
   Fundamental Concepts of Information LawMühazirə

   This topic introduces the fundamental concepts, principles, and sources of information law. It examines information as a legal object, information rights and responsibilities, access to information, information resources, and the legal regulation of information relations. The topic also considers the protection of individual rights and freedoms in the information environment.

4. 4.
   Elements of Information and Legal RelationsMühazirə

   This topic examines the structure and main elements of information and legal relations. It covers the subjects, objects, rights, obligations, and legal responsibilities arising in the information sphere. Students will explore how legal relations are established, modified, and terminated in connection with the creation, processing, storage, use, and dissemination of information.

5. 5.
   Main Directions of State Policy in the Information Sphere in the Republic of AzerbaijanMühazirə

   This topic examines the main directions and priorities of state policy in the information sphere of the Republic of Azerbaijan. It covers national strategies, state programs, institutional responsibilities, and measures aimed at developing a secure information environment. Particular attention is given to national interests, information security priorities, and the role of government institutions in protecting information resources.

6. 6.
   Regulatory and Legal Acts in the Field of Information SecurityMühazirə

   This topic introduces the main regulatory and legal acts governing information security in the Republic of Azerbaijan. It examines legal requirements related to information protection, cybersecurity, information systems, electronic services, and the responsibilities of organizations and individuals. Students will develop an understanding of how legal requirements are applied to information security management and organizational practices.

7. 7.
   Legal Issues in Ensuring the Security of Critical Information InfrastructureMühazirə

   This topic examines the legal and organizational framework for protecting critical information infrastructure. It covers the responsibilities of infrastructure operators, security requirements, risk management obligations, incident reporting, and cooperation with relevant authorities. The topic also considers the legal mechanisms used to ensure the resilience and security of critical information systems.

8. 8.
   Classification of Critical Information Infrastructure Objects, Minimum Security Requirements, and Control MechanismsMühazirə

   This topic focuses on the classification and identification of critical information infrastructure objects and the security requirements applicable to them. It examines minimum security measures, organizational and technical controls, monitoring, assessment, and compliance mechanisms. Students will study how regulatory requirements can be applied to ensure an appropriate level of protection for critical infrastructure.

9. 9.
   Legislation on the Protection of State Secrets and Confidential InformationMühazirə

   This topic examines the legal principles governing the protection of state secrets and confidential information. It covers information classification, access restrictions, confidentiality obligations, handling and storage requirements, and legal responsibilities for unauthorized disclosure or use. Particular attention is given to distinguishing protected information categories and applying appropriate legal and organizational safeguards.

10. 10.
    National and International Legislation on Personal Data ProtectionMühazirə

    This topic examines the legal principles and requirements governing the collection, processing, storage, use, and transfer of personal data. It considers national legislation of the Republic of Azerbaijan alongside relevant international and regional legal frameworks. The topic also addresses data subject rights, organizational responsibilities, consent, privacy protection, and liability for violations of personal data protection requirements.

11. 11.
    Classification of Cybercrimes and Legal Foundations for Combating CybercrimeMühazirə

    This topic introduces the concept and classification of cybercrimes and examines their legal characteristics. It covers offenses involving unauthorized access, data and system interference, computer-related fraud, malware, and other forms of cybercrime. Students will examine the legal foundations for preventing, investigating, prosecuting, and combating cybercrime at national and international levels.

12. 12.
    Legal Aspects of Digital EvidenceMühazirə

    This topic examines the legal principles governing the identification, collection, preservation, examination, and presentation of digital evidence. It covers the authenticity, integrity, admissibility, and reliability of electronic evidence in legal proceedings. Particular attention is given to digital evidence handling procedures, chain of custody, and the legal responsibilities of organizations and investigators.

13. 13.
    Concepts of Information Warfare and CyberwarfareMühazirə

    This topic introduces the concepts, characteristics, and forms of information warfare and cyberwarfare. It examines the use of information technologies and cyberspace in conflicts, including influence operations, cyber operations, disruption of information systems, and protection of information resources. The topic also considers emerging challenges associated with the increasing role of cyberspace in national and international security.

14. 14.
    Legal Aspects of Cyberwarfare and Hybrid WarfareMühazirə

    This topic examines the legal dimensions of cyberwarfare and hybrid warfare in national and international contexts. It addresses issues related to state responsibility, sovereignty, jurisdiction, use of force, protection of critical infrastructure, and the application of international law to cyber operations. The topic also considers legal challenges associated with attribution, cross-border cyber incidents, and the combination of cyber, informational, and conventional methods of conflict.

15. 15.
    Information Security Certification SystemMühazirə

    This topic introduces the principles and procedures of information security certification. It examines the purpose of certification, conformity assessment, security requirements, certification processes, and the roles of relevant authorities and organizations. Students will learn how certification mechanisms support the assessment and assurance of information security products, systems, and technologies in accordance with applicable standards and regulatory requirements.

1. Aliyev, A.I., Ibrahimova, A.N., Maharramov, B.A., Mammadrazali, Sh.S. Information Law. Textbook. Baku: Nurlar, 2019, 448 p.
2. Majidli, S.T. Cybercrimes. Baku, 2019, 315 p.
3. Legal Acts in the Field of Information and Communication Technologies.
4. ICT Legal Acts — ICT Legal Acts