Legal aspects of information security and cyber securitySyllabus

Subject code

İF-2208y

Credits

5

Student workload

90

Semester

Spring semester

Academic year

2

Subject type

Mandatory

Form of education

Full-time

Language of instruction

Azerbaijani

In-class hours

a) 30 saat - mühazirə b) 30 saat - seminar

Out-of-class hours

a) 45 saat - TSİ b) 45 saat - MRTSİ

The subject envisages the legal regulation of public relations in the field of information security and cyber security and the study of the normative-legal basis for this field. within the subject, the basics of information law, state policy in the field of information and national security interests, as well as legal mechanisms of ensuring information security are studied. students get acquainted with the legal requirements for the protection of personal data, state secret and confidential information, as well as the security of critical information infrastructure. the classification of cybercrimes, the legal basis of the fight against cybercrime and the legal aspects of digital evidence are among the main topics of the subject. at the same time, the legal aspects of information war, cyber war and hybrid wars, as well as national and international legal approaches in this field are analyzed. the subject is aimed at forming the students' ability to analyze relevant normative-legal acts and evaluate their application in the field of information security.

• lecture
• interactive discussion
• presentations
• seminar

1. 1

   CLO 1: He should gain knowledge about the foundations, sources, elements of legal relations, subjects of legal norms of the right to information, as well as study basic human rights and freedoms in the field of information.

2. 2

   CLO 2: In the republic of azerbaijan, one should acquire knowledge about the main directions of state policy in the field of information, relevant strategies and state programs, as well as acquire knowledge about the country's national security interests and information security policy in the field of information.

3. 3

   CLO 3: The manager should be familiar with the regulatory legal acts related to information security and cyber security and should know their requirements.

4. 4

   CLO 4: Legal and organizational issues in the field of ensuring the security of critical information infrastructure, as well as general knowledge of the classification of infrastructure objects, minimum security requirements, and control mechanisms should be acquired.

5. 5

   CLO 5: He should know the requirements of the relevant legislation in the field of protection of personal data, as well as state secrets and confidential information, as well as professional, commercial, investigative and judicial secrets, as well as study the measures of responsibility for the violation of the requirements of the current legislation.

6. 6

   CLO 6: He should acquire general knowledge about the concept, classification of cybercrimes, and the legal basis of the fight against cybercrime, as well as the concepts of information warfare and cyberwarfare and their characteristics, modern challenges, and the legal aspects of hybrid warfare.

1. 1.
   Introduction. legal system of the republic of azerbaijanLecture

   Within the framework of the topic, the concept of law, its essence and role in society, the main features of legal norms and the sources of law are studied. general information about the structure of the legal system of the republic of azerbaijan and the main legal fields is provided. the concept, features and subjects of legal relations, as well as the concept, composition and main types of legal violations are explained. the concept, main signs and types of legal responsibility are also reviewed.

2. 2.
   Basic concepts of information lawLecture

   Within the framework of the topic, the concept, essence and main factors determining the formation of information law as an independent field of law are studied. the impact of information revolutions on the creation and development of information law is considered. social relations, legal regulation methods and means that constitute the subject of the right to information are explained. information is also provided about the main functions and structure of the information law system.

3. 3.
   Elements of information right relationsLecture

   Within the framework of the topic, the concept, structure and main elements of information legal relations are studied. the formal and factual content of these relations, as well as the objects of informational legal relations, are reviewed. the main concepts of the objects of the right to information and their legal significance are explained. also, the concept and essence of legal facts in information law, as well as the main classification criteria of information law relations are investigated.

4. 4.
   The main directions of state policy in the field of information in the republic of azerbaijanLecture

   Within the framework of the topic, the concept, content, purpose and main tasks of the state policy in the field of information are studied. the main directions of the state's information policy and the legal basis of its implementation are reviewed in the republic of azerbaijan. the system of state bodies performing regulatory functions in the field of information and their powers are explained. also, the role of state bodies in ensuring the right to access information, as well as the laws and other normative-legal acts that define the main directions of the state's information policy are examined.

5. 5.
   National security interests and information security policy in the field of informationLecture

   Within the framework of the topic, the formation of the national information space and the main directions of informatization are studied. the legal regulation of public relations and national security interests in the field of information are reviewed as a result of the development of information processes. the main directions, goals and priorities of the information security policy of the republic of azerbaijan are explained. also, the main provisions and directions of application of the information security and cyber ​​security strategy of the republic of azerbaijan for 2023-2027 are examined.

6. 6.
   Regulatory legal acts in the field of information securityLecture

   Within the framework of the topic, normative-legal acts that form the basis of legal regulation in the field of information security in the republic of azerbaijan are studied. the main provisions of the laws "on information, informatization and information protection", "on national security", "on freedom of information" and "on access to information" are reviewed. the role of these laws in regulating information relations and ensuring information protection is explained. also, mechanisms of legal guarantee of basic human rights and freedoms in the field of information are investigated.

7. 7.
   Legal issues in the field of ensuring the security of critical information infrastructureLecture

   Within the framework of the topic, the legal and organizational bases for ensuring the security of critical information infrastructure in the republic of azerbaijan are studied. the rules for ensuring the security of critical information infrastructure and the functions of competent state bodies in this field are reviewed. the organization and main components of the information security management system in critical information infrastructure subjects are explained. also, issues of organization, management and implementation of activities on the security of critical information infrastructure are investigated.

8. 8.
   Classification of critical information infrastructure objects, minimum security requirements and control mechanismsLecture

   The principles of identification and classification of critical information infrastructure objects are studied within the subject. general and special requirements for ensuring the security of critical information infrastructure are reviewed. defined requirements for cyber security service providers, their staff, technological resources and operational processes are explained. also, the control mechanisms for ensuring the security of critical information infrastructure and the evaluation measures implemented in this area are investigated.

9. 9.
   Legislation in the field of protection of information constituting a state secret and confidential informationLecture

   Classification criteria according to the legal regime and protection level of information are studied within the subject. the main methods of legal regulation and protection of confidential information are considered. the basic requirements and legal mechanisms defined by the legislation in the field of information protection, which constitutes a state secret, are explained. also, the relevant legislative requirements on the protection of professional, commercial, investigative and judicial secrecy are examined.

10. 10.
    National and international legislation in the field of personal dataLecture

    Within the scope of the topic, the concept of personal data, its main categories and their legal protection are studied. legal restrictions on obtaining information about personal and family life and the rights of individuals during the processing of personal data are reviewed. the right of a person to get acquainted with the information collected about him and the mechanisms ensuring the implementation of this right are explained. also, national legislation in the field of personal data protection and the main principles of the gdpr, as well as legal issues related to the security of personal data in artificial intelligence systems, are examined.

11. 11.
    Classification of cybercrimes. legal foundations of the fight against cybercrimeLecture

    Within the framework of the topic, the concept, main features and classification of cybercrimes in national and international law are studied. development characteristics and legal aspects of cybercrime in global and national context are reviewed. the specific legal and practical challenges that arise in the process of combating cybercrime, as well as the available opportunities, are explained. also, national and international cooperation mechanisms in the field of combating cybercrime are being investigated.

12. 12.
    Legal aspects of digital evidenceLecture

    Within the scope of the topic, the concept, main features and legal significance of digital evidence are studied. legal requirements for the processes of identification, collection and documentation of digital evidence are reviewed. the principles of storage, use and protection of this evidence are explained in order to protect its integrity and reliability. also, the main issues regarding the presentation and acceptance of digital evidence in legal proceedings are examined.

13. 13.
    Concepts of information warfare and cyber warfareLecture

    Within the framework of the topic, the concepts of information warfare and cyber warfare, their main features and role in the modern security environment are studied. these concepts are compared to classical warfare and the main differences between them are explained. the main directions of information warfare and its interaction with cyber warfare are examined. it also provides information on the concept and characteristics of cyber weapons and cyber versions of booby traps.

14. 14.
    Certification system of information security toolsLecture

    Within the scope of the topic, the purpose, importance and basic principles of the system of certification of information security tools are studied. processes for assessing and confirming the compliance of information security tools with established security requirements are reviewed. the main stages of certification and the rules applied in this process are explained. also, the role of the certification system in ensuring the reliability of information security tools and compliance with regulatory requirements is investigated.

1. Aliyev a.i., ibrahimova a.n., maharramov b.a., mammadrzali sh.s., right to information. textbook. baku: nurlar, 2019, 448 p.
2. Majidli s.t., cybercrimes. baku: 2019. 315 p.
3. Legal acts in the field of information and communication technologies.(opens in a new tab)
4. Dr. elvin balajanov, dr. tabriz raufoglu (jafarov), humay huseynova and vugar gadimov. legal aspects of information security and cyber security. association of cyber ​​security organizations of azerbaijan. baku - 2024, 99 p.