Cybersecurity lawSyllabus

Subject code

MM-1405

Credits

6

Student workload

133

Semester

Spring semester

Academic year

1

Subject type

Mandatory

Form of education

Full-time

Language of instruction

Azerbaijani

In-class hours

Lectures: 30 hours; Seminars: 15 hours

Out-of-class hours

Hours Independent Study: 90 hours; Independent Work with the Instructor: 60 hours

The course cybersecurity law covers the legal relationships arising from the use of information and communication technologies, legal requirements in the field of cybersecurity, and the principles governing the legal protection of information resources. it examines cybercrime, the protection of personal data and privacy, unauthorized access to information systems, and legal issues related to the unlawful acquisition and use of data. the course also addresses legal liability for information security violations, the collection and use of electronic evidence, legal aspects of cybersecurity incidents, organizational obligations concerning the protection of information systems, and international legal cooperation in cyberspace. students develop the skills necessary to analyze the legal framework governing cybersecurity activities, identify key legal risks, and assess the compliance of information security measures with applicable legal requirements.

• lecture
• seminar
• presentations
• interactive discussion

1. 1

   CLO 1: Explain the fundamentals and sources of information law, the elements of legal relationships, the subjects of legal norms, and the fundamental human rights and freedoms related to information.

2. 2

   CLO 2: Describe the main directions of state policy in the information domain of the republic of azerbaijan, relevant strategies and state programs, as well as national security interests and information security policy.

3. 3

   CLO 3: Identify the principal regulatory legal acts governing information security and cybersecurity and explain their requirements.

4. 4

   CLO 4: Demonstrate general knowledge of the legal and organizational aspects of critical information infrastructure security, including infrastructure classification, minimum security requirements, and control mechanisms.

5. 5

   CLO 5: Explain the legal requirements for protecting personal data, state secrets, confidential information, and professional, commercial, investigative, and judicial secrets, as well as the liability measures applicable to violations of relevant legislation.

6. 6

   CLO 6: Explain the concept and classification of cybercrimes and the legal foundations for combating cybercrime, as well as the concepts and characteristics of information warfare and cyberwarfare, contemporary challenges, and the legal aspects of hybrid warfare.

1. 1.
   Strategy of the republic of azerbaijan on information security and cybersecurity for 2023–2027Lecture

   This topic examines the strategy's main priorities and action plans for ensuring information security and cybersecurity in the country, reducing risks, and implementing preventive measures against emerging technological threats.

2. 2.
   Law on information, informatization, and protection of informationLecture

   This topic examines the legal framework governing the collection, processing, storage, and protection of information resources in azerbaijan. it focuses on ensuring information security and establishing the legal mechanisms required to protect information.

3. 3.
   Convention on cybercrimeLecture

   This topic explores the budapest convention as an international legal instrument designed to prevent cybercrime, establish procedures for identifying and investigating cyber offenses, and promote international legal cooperation in combating cybercrime.

4. 4.
   Rules for ensuring the security of critical information infrastructure in the republic of azerbaijanLecture

   This topic examines the regulatory framework governing the identification of critical information infrastructure facilities, their protection against cyber threats, and the organizational and technical measures required to ensure their continuous and reliable operation.

5. 5.
   Law on telecommunicationsLecture

   This topic covers the legal, economic, and organizational foundations of telecommunications activities in the republic of azerbaijan. it examines the provision of communication services, the activities and responsibilities of telecommunications operators, and the protection of users' rights

6. 6.
   Law on personal dataLecture

   This topic examines the legal foundations for collecting, processing, storing, and protecting personal data in the republic of azerbaijan. it focuses on the protection of individuals' privacy and the measures required to ensure the confidentiality and security of personal information.

7. 7.
   Model regulation on state information resources and information systemsLecture

   This topic examines the organizational and legal principles governing the establishment, management, use, and protection of state information resources and information systems. it considers the regulatory requirements applicable to their operation and administration.

8. 8.
   Law on state secretsLecture

   This topic examines the legal and organizational framework for classifying, protecting, and using state secrets. it also addresses the protection of classified information and the legal liability associated with violations of state secrecy requirements.

9. 9.
   Rules for the establishment, maintenance, integration, and archiving of state information resources and systemsLecture

   This topic examines the organizational and technical requirements for establishing and maintaining state information resources and systems, integrating them with other systems, and archiving information. it focuses on the procedures governing the management and preservation of state information resources.

10. 10.
    Law on freedom of informationLecture

    This topic examines the legal framework for ensuring freedom of access to and dissemination of information. it addresses the obligations of public authorities and other relevant organizations to provide information, as well as the procedures for exercising the right to access information.

11. 11.
    Law on access to informationLecture

    This topic covers the procedures for accessing information held by public authorities and other information holders. it examines mechanisms for ensuring citizens' right to access information and the principles of transparency and accountability in information provision.

12. 12.
    Law on national securityLecture

    This topic examines the legal foundations for ensuring the national security of the republic of azerbaijan. it addresses national security strategies, the activities of relevant security authorities, and the protection of the state and its citizens against security threats.

13. 13.
    Chain of custodyLecture

    This topic examines the procedures and documentation required to preserve the integrity and authenticity of evidence from its initial collection through storage, transfer, and presentation. it focuses on maintaining a documented record of evidence handling to demonstrate that evidence has not been altered or compromised.

14. 14.
    Governance, risk, and compliance (grc)Lecture

    This topic introduces governance, risk management, and compliance as key components of a proactive and strategic approach to cybersecurity. it examines how organizations identify and assess risks, establish security policies and controls, meet applicable legal and regulatory requirements, and minimize risks arising from malicious activities.

15. 15.
    Convention 108+ on the protection of individuals with regard to the processing of personal dataLecture

    This topic examines convention 108+, an international legal instrument designed to protect individuals' rights and privacy in connection with the automated processing of personal data. it addresses the principles and safeguards governing the collection, processing, storage, and protection of personal information in automated systems.

1. Law on information, informatization, and protection of information.
2. Law on personal data.
3. Rules for ensuring the security of critical information infrastructure.
4. Rules for the establishment, maintenance, integration, and archiving of state information resources and systems.
5. Model regulation on state information resources and information systems.
6. Rules for ensuring the security of critical information infrastructure.