Introduction to Cybercrime and Legal Issues

People or human-controlled organizations are the primary threat vectors when it comes to threats to the security of information assets and information systems.

Damage to information systems or disclosure of the information is not the only outcome to be considered; there is also the crime associated with causing the damage.

This has given rise to the concept of 'cybercrime'.

The definition of cybercrime varies depending on the source. However, the most basic and understandable definition can be made as follows:

Cybercrimeis any incident in which computer systems are the target or are used as a tool. Examples of cybercrime include unauthorized access to computer systems, theft of data, and disabling of systems.

"Internet-based crime" or "cyber attacks" are sometimes used instead of cybercrime. The term "cybercrime" is most commonly used, especially when dealing with legal issues.

Having a crime involved means that legal issues need to be addressed. Therefore, information security professionals should understand cybercrime and related legal processes.

The goal of this module is to assist information security professionals in this task.

Therefore, this module will not approach cybercrime or cyber-attacks from a loss or risk management perspective. Instead, it will focus on the legal procedures involved and how they apply to cybercrime.

Depending on this objective, the module will cover the following topics:

• Categorization and Examples of Cybercrime

• Categorization to help understand Legal and Regulatory Logic

• Key Information Security Laws and Regulations

• Types of Intellectual Property (IP), which is one of the main targets of cybercrime and how to ensure its security

• Investigation Procedures and Evidence Management

In the next section, before we delve into the legal issues, we'll discuss "Categorizing Cybercrime." This will help us understand cybercrime in a more systematic way.