Question

SMEs (all industries) are very proactive in developing business with international counterparts, whether they are individual or corporates. Examine whether there are there any rules and regulations on cyber security AND data privacy that they need to comply with, and briefly explain each case.

Answer 1

In the past time, cyber security was not an issue for the entrpreneurs, but now a days, with increased web activity, various steps haev been taken by governments of various countries for protection against cyber crimes. The organizations which do not comply with the cyber security laws with respect to the work which they are doing, might be exposed to significant fines and penalties. In addition, generous expenses could come about because of accomplishing compliance after administrative bodies find shortcomings and request cures. But, awareness is the initial step of staying away from issues. As of December 31, 2017, all contractors working for the Department of Defense (DoD) must abide by requirements set by the organization. Failing to do so could mean losing a contract or having to cease the fulfillment of work orders until the contractor is verifiably in compliance. No concern about data privacy compliance is complete without bringing up the European Union’s General Data Protection Regulation (GDPR). Passed in 2016 and having taken effect last year, GDPR regulates how companies collect, store, use, and share EU citizens’ personal information online. On the day GDPR took effect, countless Americans received email after email about updated privacy policies, often from companies that were founded in the United States.

The examples of various cyber security laws are:

USA:

1. The National Strategy to Secure Cyberspace (2003)

2. Cyberspace Policy Review (2009)

3. International Strategy for Cyberspace. Prosperity, Security, and Openness in a Networked World (2011)

Canada:

1. Canada’s Cyber Security Strategy. For a Stronger and More Prosperous Canada (2010)

2. Action Plan 2010-2015 for Canada’s Cyber Security Strategy (2013)

3. Action Plan for Critical Infrastructures 2014-2017 (2014)

France:

France

1. White Paper: Defence and National Security (2013)

2. French National Digital Security Strategy (2015)

These are some of the examples of cyber security laws implemented all over the world. Although it will be difficult to know the exact value or the extent of the fine tha could be imposed, its always advised to steer clear off the malpractices.