Cybersecurity Law

Course description:

Course content:

This MC module carries a workload of 3 ECTS, corresponding to a total study load of 78 hours. The MC module consists of a total of 7 online lectures including follow-up discussions (21 hours). As part of distance learning, participants will discuss individual areas of regulation and their application using practical examples (35 hours). Understanding of the subject matter can be verified through online consultations (6 hours). At the end of the module, participants will be assessed on the basis of test questions covering the subject matter taught (2 hours). The remaining time is allocated to exam preparation (14 hours). The list of lectures is provided below. The individual lectures follow on from each other logically.

Lecture 1 - Intro + Secure data handling 101: This lecture provides an introduction to cybersecurity law and secure data handling. It covers key concepts and reasons for regulation and compliance requirements. The lecture also explores legal obligations for securing digital assets in context of cybersecurity and expands key principles which will be discussed throughout this course.

Lecture 2 - Introduction to Cybersecurity Governance: This lecture introduces the importance of cybersecurity and its regulation, focusing on the EU's legal frameworks like the NIS2 Directive and Cybersecurity Act. It explores cybersecurity risks, governance approaches, and international cooperation. Participants will gain insights into regulatory measures and institutional roles in addressing cyber threats.

Lecture 3 - Cybersecurity regulation in the EU: This lecture examines key legislative instruments shaping the EU’s cybersecurity framework following on the introduction to cybersecurity. It covers the need for harmonized rules and explores in more depth crutial major regulations, including the NIS2 Directive, Cybersecurity Act, Cyber Resilience Act, Cyber Solidarity Act, and DORA. The discussion highlights their implementation at the national level, the role of institutions like ENISA and the European Commission, and the importance of cooperation among Member States. This lecture thus focuses on the relations and intersections between regulatory instruments.

Lecture 4 - Compliance in Cybersecurity: This lecture explores how organizations can integrate EU cybersecurity regulations, such as NIS2, the Cybersecurity Act, and the Cyber Resilience Act, into daily practices. It highlights risk management, the role of Information Security Management Systems (ISMS), and certification mechanisms for compliance. The discussion includes ENISA’s guidance, national enforcement differences, and real-world case studies, helping students understand how to align legal requirements with operational security.

Lecture 5 - Identity management: This lecture explores identity management, focusing on the legal framework established by the eIDAS Regulation and its expansion under eIDAS 2. It examines electronic identity (eID) in both public and private sectors, highlight