TIM-8345: Global Governance, Audit, Privacy, and Compliance

Romaniuk, S. N., & Manjikian, M. (2021). Routledge companion to global cyber-security strategy. Routledge.

Read Chapter 20: NATO's Evolving Cybersecurity Policy and Strategy
This chapter details the strategy behind the NATO-EU cooperation agreement involving the recognition of cyberspace as an operational domain in defense and offensive operations.

Kosseff, J. (2018). Developing collaborative and cohesive cybersecurity legal principles. 2018 10th International Conference on Cyber Conflict (CyCon), Cyber Conflict (CyCon), 2018 10th International Conference On, 283–298.

This paper suggests four goals of common international principles for cybersecurity law: (1) modernization of cybersecurity laws; (2) uniformity of legal requirements; (3) coordination of cooperative incentives and coercive regulations; and (4) supply chain security.

Gonzalez-Granadillo, G., Menesidou, S. A., Papamartzivanos, D., Romeu, R., Navarro-Llobet, D., Okoh, C., Nifakos, S., Xenakis, C., & Panaousis, E. (2021). Automated Cyber and Privacy Risk Management Toolkit. Sensors (Basel, Switzerland), 21(16). https://doi.org/10.3390/s21165493

This article describes an automated cyber and privacy risk management toolkit, called AMBIENT (Automated Cyber and Privacy Risk Management Toolkit), and a use case scenario based on information about cyberattacks received from a healthcare organization, as a reference sector that faces critical cyber and privacy threats.

National Conference of State Legislatures. (2021, June 22). Cybersecurity legislation 2021.

This website details the legislative changes that have changed related to different aspects of cybersecurity in the United States.

United States Department of Justice, Computer Crimes & Intellectual Property Section Criminal Division. (2020, February). Legal considerations when gathering online cyber threat intelligence and purchasing data from illicit sources.

This report details the importance of private organizations maintaining awareness of the legality of specific cybersecurity measures. This document focuses on information security practitioners’ cyber threat intelligence gathering efforts that involve online forums in which computer crimes are discussed and planned and stolen data is bought and sold.

Saiz-Alvarez, J. M., & Leal, G. C. (2020). Cybersecurity Best Practices and Cultural Change in Global Business: Some Perspectives from the European Union.

This article explores the technology of cyber threat intelligence (CTI) which is a proof-based defense framework that proactively reacts by monitoring and exchanging security-related information of advanced cyber threats among different industries. The efficiency of CTI systems may be considerably impeded by developing and disseminating inappropriate protection policies. Although global attention is on the health and the economic challenges raised by COVID-19, this epidemic is certainly being exploited by cybercriminals across the globe.

Shackelford, S. J. (2017). The Law of Cyber Peace. Chicago Journal of International Law, 18(1), 1–47.

This article emphasizes the different implications of international law in enhancing awareness and research in global cybersecurity.

Finnemore, M., & Hollis, D. B. (2020). Beyond Naming and Shaming: Accusations and International Law in Cybersecurity. European Journal of International Law, 31(3), 969–1004.

This journal article introduces and examines the broader concept of "accusation" as a social, political, and legal practice with diverse uses in cyberspace and beyond.