ASTK18195U Regulatory and Cyber Risks

The financial crisis, vehicle emission fraud and numerous other scandals have emphasized the need for ethical behaviour and regulatory compliance. Governments often address these crises by adopting new regulatory instruments in the domain of security and cyber risks. Keeping pace with the velocity and volume of these changes prove to be a challenge to public and private organizations. In parallel, the European Union’s Charter of Fundamental Rights has codified the fundamental rights of citizens, such as the right to the protection of personal data, of access to information, and the presumption of innocence.

Overcoming the seeming dichotomy between ‘freedom versus security’, the course aims to introduce the main regulatory frameworks in the field of security risk management. It will explore the various legal instruments and their rationale, as well as the dilemmas and technological developments that practitioners face. Students will learn how risk and regulatory compliance is not a burden of confusing rules and penalties, but an opportunity to build organisational resilience by increasing the capabilities to detect, investigate and respond to advanced security risks.

The course covers four main themes:

1) The Charter of Fundamental Rights, law and institutions of the EU and the General Data Protection Regulation (GDPR);

2) Information security, cyber resilience, confidentiality and protection of trade secrets;

3) Anti-corruption, bribery, money laundering, and sanction lists;

4) Investigations, personal and corporate criminal liability.