Overview
Knowing some rules of law is not the same as knowing how to deal strategically with real-world legal problems. Section 5 is organized around extended case studies in security law: break-ins, investigations, piracy, extortion, rootkits, phishing, botnets, espionage, and defamation. The studies lay out the chronology of events and critique what the good people did right and what they did wrong. The goal is to learn to apply principles and skills to address incidents in your day-to-day work.
The section includes an in-depth review of legal responses to the major security breaches at TJX, Target, and Home Depot, Freddie Mac, and others. It looks at how to develop a bring-your-own-device (BYOD) policy for an enterprise and its employees.
The skills learned are a form of crisis management, with a focus on how your enterprise will be judged in a courtroom, by a regulatory agency, or in a contract relationship. Emphasis will be on how to present your side of a story to others, such as law enforcement, Internet gatekeepers, or the public at large, so that a security incident does not turn into a legal and political fiasco.
In addition to case studies, the core material will include tutorials on relevant legislation and judicial decisions in such areas as privacy, negligence, contracts, e-investigations, computer crime, and active countermeasures.
LEG523 is increasingly global in its coverage. Although this section refers to a number of US-based stories, legal issues and the roles of government authorities outside the United States will also be examined.
At the end of Section 5 the instructor will discuss a few sample questions to help students prepare for the GIAC exam associated with this course (GLEG).