CyBER SECURITY LAWS AND REGULATIONS

CYBER SECURITY LAWS AND REGULATIONS INTRODUCTION 3 2)Admissions 4 2.1 Eligibility 4 2.2 Credit transfer 4 2.3 Obligations 5 2.4 IELTS 5 3) Privacy 5 3.1 Right to information 6 4) Fees 8 4.1)Laws and regulations regarding fees:- 8 4.2) Approaches of Fees Policies:-8 4.3) Effects of breaching of fees 9 4.4) Breaching of duty and its consequences 9 5) Evaluation and Inspection 10 5.1) Evaluation 10 5.2) Rules regarding exams10 5.3)

CYBER SECURITY LAWS
AND REGULATIONS

Table of Contents
INTRODUCTION...........................................................................................................................3
2)Admissions...................................................................................................................................4
2.1 Eligibility..........................................................................................................................4
2.2 Credit transfer...................................................................................................................4
2.3 Obligations.......................................................................................................................5
2.4 Consequences...................................................................................................................5
3) Privacy.........................................................................................................................................5
3.1 Right to information.........................................................................................................6
4) Fees..............................................................................................................................................8
4.1)Laws and regulations regarding fees:-.............................................................................8
4.2) Approaches of Fees Policies:-.........................................................................................8
4.3) Effects of breaching of fees.............................................................................................9
4.4) Breaching of duty and its consequences.........................................................................9
5) Evaluation and Inspection.........................................................................................................10
5.1) Evaluation.....................................................................................................................10
5.2) Rules regarding exams..................................................................................................10
5.3) Plagiarism......................................................................................................................10
5.4) Consequences................................................................................................................10
6)General Analysis.........................................................................................................................11
7) Recommendations.....................................................................................................................11
CONCLUSION..............................................................................................................................12
REFERENCES..............................................................................................................................13

INTRODUCTION
This report is about the New Management System for the various students which are
deployed by the university. The purpose behind this is that university wants to change as well as
develop a new management system for the higher studies. University wants to reduce the load on
the manual work as number of students are taking admissions(Axelrod, 2015). There is a high
rate of enrollments from the international and domestic students and it has become vital to
develop a system which can help in improving their income(Porcedda and Wall, 2018). As per
the assignment, main focus is on the privacy and security of the university so, this is the main
purpose of implementing the Student Management System in order to protect the information.
Rate of cyber security threats has been increasing within the education sector and now it has
become really important for University A to protect from the cyber attacks(Kittichaisaree, 2017).
The systems should not be such that it is weak and vulnerable to attacks or can be easily
breached(Zhang, 2018). For cyber criminal educational institution are prime focus because in it
administration, students as well as management data are stored. Current report includes a SaaS
which is also known as Software as a Service which is software providing solution related to
students management system. With the help of SaaS University A can make its management
system simple and more reliable and can be used by the students and administrative as
well(Guiora, 2017).
This system also provides a proper privacy and security which help in maintaining the
confidentiality of data gathered. Confidentiality, Integrity and Availability which is also known
as CIA and there are referred as the fundamentals of the information security(Mittal and Sharma,
2017). There are various features of SaaS which are mentioned below:
 SaaS is very easy to use and also easy to access.
 It is cheap as compared to other software available for the student management system.
 It also offers high level of security for the data stored on the cloud.
 This software can be used anywhere and any time which means it is easy friendly.
 SaaS has got high level of scalability and can be extended as per the requirement of the
client.
There are also various principles, guidelines and ways for the various subsequent parts which can
be analyzed below:

2)Admissions
In order to admit student in the university students need to fulfill some requirements in
order toe get admission and by using SaaS for the management will make the admission process
easier for the students, and they can easily check their status of the admission, the eligibility
criteria required to follow for getting admission in the university(Furfaro and et.al., 2016). This
will also provide a good experience and software can be easily updated with various strategies.
2.1 Eligibility
For the eligibility criteria every student need to follow some requirements in order to enter the
university which are as follows:
1. Previous experience of study.
Each and every individual are required to have related and relevant background for future
studies. If student wish to secure admission at any level whether graduate or even post graduate
then having a specific background is the foremost thing.
2. Proficient in English for overseas students:
The students coming from overseas are required to clear some tests such as IELTS, TOFEL and
many more. Different level calls for different requirements like at graduate level in IELTS,
student should have 6 bands rather than 6.5 which is for master level.
3. Documentation authentication.
In order to get admission, each student should have their authentication documentation which are
needed for verification like Educational transcript, passport or anything else
4. Scholarship
Once the student got selected for scholarship, Additional information would be required. This
scholarship is usually on the basis of performance of previous academic year.
5. Fund requirement.
For securing the admission, students will be required to pay some amount such as admission
fees.
2.2 Credit transfer
It is required in case of transferring of university by students which generally occur during two
cases:
1. Applying RPL

In order to migrate to different university, the student must satisfy the required criteria then only
the person will get the passing credits in passed subjects hence this would enable them to
continue with the remaining units.
2. Transfer from A university to another one.
In case if student decides to migrate from A university to other one, the former must meet the
requirements of same university for the issue of credit transfer.
2.3 Obligations
1. The various strategies, principles as well as the guidelines of university must be laid with
approval of the concerned groups engaged in decision-making.
2. The guidelines along with policies must be written in simple English so that it becomes easier
to understand.
3. The required bodies needs to ensure that overall policies and guidelines are properly followed
by entire staff as well as talented members.
2.4 Consequences
1. All the appeals of respective students are briefly inspected and if appropriate, the offer letter in
addition to awards as well as scholarships are offered.
2. For successful admission, the required score of English proficiency must be present otherwise
the respective file will be rejected.
3. If at any point during the investigation, university came across that submitted documents are
not genuine and are fake then the university have legal right to dismiss admission.
3) Privacy
In this section, the privacy policy of university staff, student and administrator will be briefly
discussed. Here the main concern is about the efforts of SaaS to make the management system of
students more powerful and secure. To formulate the privacy, they utilize definite access control
as well as authentication mechanism(Karabacak, Yildirim and Baykal, 2016). It also utilizes the
multi-factorial authentication scheme to ensure that the information and data is accessed only by
authorized users. Following section provides a brief about various privacy policies which needs
to be used. Third party revelation becomes the main emphasis here.

For students.
Legal With regulation framework
The 1988 act defines the structure of privacy policy in University. This law postulates that no
disclosure of data & information must be made to the third party.
Breach outcomes/Penalties
The violation of the respective policy distresses the personal & confidential data of an individual
due to its sensitiveness to physical as well as financial and different kind of reversal by third
party.
For the Administrative Staff
Policies along with Procedures: The privacy policy within managerial team remains elementary
& uncomplicated. The staff is strictly prohibited to share the information about students and
admission procedure to third force. Data of students are required to keep confidential every time.
Legal Framework: The 1988 act defines the policies of university. This act lays down the fact
that third force are not allowed to access important data and information regarding originator and
the following disclosure is extremely avoided.
Breach Consequences: In course of the breach of private policy on administration side, The
internal data within system is under threat.
For the Education Staff
Guidelines with Procedures: No staff member is allowed to provide student's progression
report to third force until and unless students permit doing so.
Legal Acts: According to 1988 act, disclosure to third party shall be allowed in the scenario
when it becomes legally important and when student discretion remains impossible.
Breaches along with Penalties: Similar penalties are incurred like that of administrative staff in
case of the alteration of sensitive information about students.
3.1 Right to information
Right to information is basically the methodology of gathering information from various
university. It is briefly described below.

Relative to Managerial staff.
Policies along with procedures
All the essential & important information as well as data shall be available on university’s
website. Besides this, website must own a request form whereby student can appeal for any
information which he/she requires from university.
Legal as well as Regulatory framework
The act(2009) (Government information Act) addresses the guidelines to disclose information
relating to government in front of the public through different organizations. The main aim of the
following act deals about giving lawful right to public to have the access of government
information until & unless an intermediate community interest is present in comparison to
revelation.
Effect of Breaches
Individual have the legal right to complaint against following university in case privacy policy
and procedure is violated or there is no duplicate information presented.
For students
Policies with Procedures
Students shall solicit information from respective university.
Legal and regulatory framework
The ensuing act is administered under
 Privacy act related to information 2009
 Right related to Information(2009)
Outcomes of breach
Individuals have the authorized right to file the complaint against university in view of the
violation of above mentioned act.
Relative to coaching Staff
Policies as well as Procedures
University have direct of Data & information of numerous teaching staff and personnel.
Legal with regulatory framework
Important data & information confined by the university must be secured under a vital privacy
law.
Upshot of Breach

Data shall be extremely protected & shall not be disclosed to other or third party.
4) Fees
4.1)Laws and regulations regarding fees:-
Fees rule 2017 regulates the various features related to fee laws.
4.2) Approaches of Fees Policies:-
Part:A Formation of fees and the principles regarding their publication
 Fees and charges regulation act 2013 will monitor all the aspects related to fees charging.
 It is the duty of the universities that they declare and issue the fees for each course they
offer on their website accordingly.
 The offered fees by the university is basically different for each course regarding the
extent of studies which is based on the demand and preference and the market amount.
 And the non-tuition fees charges are decided on the basis of the forces of external
business prevailing in the market(Wall, 2018).
Part:B Adjustment of fees and its principles
 A criteria meeting will be convened in which the refund policy will be framed regarding
the payment whether it is partial or full.
 Fees Adjustments Procedure on domestic and international level regulates the policy
framework regarding the refund of fees.
 The students who have financial hardships will be entertained by fees extension which
will be a financial help for them.
Part:C Fees evaluation authority
 Chief financial officer is responsible for approving non tuition fees and also his
consultation is taken by administration staff and vice-chancellor for approving the tuition
fees.
University Fees section procedure:
4.2.1) Procedure for governing tuition fees

According to the Fees and charges regulations 2013, the implementation process related to fees
and charges in relation to fixing, adjusting, altering, and its issuance is determined and amended
on the basis of the legislation prevailing(Ambrus, Rayfuse and Werner, 2017).
4.2.2) Procedure for governing non-tuition fees
Fees and charges regulations 2013, part 2, defines the setting, revising and publicizing of the
non-tuition fees and charges.
4.2.3) Procedure for domestic student's fees adoption
This procedure broadly defines and classify the refundable category fees and also allocation
regarding the addition, returning, and waiving off of the fees of domestic students.
4.2.4) Procedure for international student's fees adoption
For better serving to the foreign students, this procedure is being set up regarding the extension,
of fee along with its refund and waving off on which there is impact of certain elements which
includes TAFE and Health coverage and also courses for English.
4.3) Effects of breaching of fees
 Non-payment of fees in full or partial or delaying the payment of fees.
 Late fees or making payment of fees after the due date has been passed.
 The balance of amount is always showed as negative in the university account.
4.4) Breaching of duty and its consequences
The consequences of breaching of the duty in relation to the payment of fees includes:
 Non-payment of fees can result in denial of the enrollment through the
university(Anderson, 2018).
 If the domestic or foreign students fails in payment of fees on time then in that case their
subsisting enrollment will be nullified or suspended accordingly.
 According to the provisions of Governance, Academic and student Affair statute 2013,
section 42, the above actions are taken.

5) Evaluation and Inspection
5.1) Evaluation
Through evaluation the progress in the education and its results is being measured. It assists the
students in their learning and grasping the things flexibly which is very important for the
students. The components on which the units of courses offered to the students will be evaluated
will be base on time of submission, their content writing and also plagiarism.
5.2) Rules regarding exams
The code of conduct and the regulations following the exams are to be followed by the students
sitting for the university examination in proper manner. For maintaining the discipline of
university A, following guidelines are to be followed:
1. Before sitting in to the examination hall, it should be made sure by the students that the
cell phones are switched off(Sari, 2019).
2. All the students must be punctual enough regarding the entrance in the examination
center, which should be at least 20 minutes earlier before the beginning of that particular
exam.
3. It is not allowed to take the question paper and also the answer sheet outside the area of
examination hall.
5.3) Plagiarism
The evaluated copies must not be exchanged, plagiarism includes collusion, replication and
citation which is not appropriate and considering it is very important.
Obligations:
1. Any failure in regard to the set standards and agreements by the students will result n
negative impact on them. Therefore, the students should abide by the principles and rules
set by the university.
2. Each and every student must be treated equally and there should be no exception
provided to anyone.
3. The students should be aware about the results of not abiding the rules and regulations
set.
5.4) Consequences
1. The student will be suppressed if he/she does not follow the rules and code of conduct of
the university.

2. The university can restrict the students on the basis of the identity of their breach of duty.
6)General Analysis
University A needs to collect and prepare the data about their employees, students and other
individuals for performing the various functions related to administrative job, scholastic, etc. and
also abiding by the legislation through fulfilling the commitments. The most authoritative
resources of any university is the information which has to be gathered and data has to be
handled in accordance to that as the university only relies on it. The data has to be kept safely
and with its backup as if there is any security breach in the anybody's duty, then in that case it
will be easy to take any action. Storage of data in media which is removable in nature, which can
include magnetic tape or backed up in a network accordingly or through USB memory
stick(Casanovas and et.al., 2017).
7) Recommendations
There are various platforms which can be used by the University A on cloud according to their
reliability and cost-effectiveness, one of them can be SAAS. Though, the data and information of
the university A is fully protected, then also if any external attack is done such as malware
ransomware, service is denied or password is attacked, then in that case the system can be
prevented from being collapsing through adopting protective measures(Nemeth, 2017).
Also, university can adopt CIA Model for safeguarding of data and information as:
Confidentiality: The person who has the authority is the only one who can have access over the
information.
Integrity: The data over and above the complete cycle of data should be reliable, compatible,
and accurate.
Availability: As stated earlier, the data should always be accessed by the authoritative person and
in case of any breach or problem the back up of the information should always be present.
In contrast, all the employees, staff members and users of university who are authorized, have to
compulsorily follow the rules and regulations so that the environment and culture is secured.
And if there is any loss of privacy, or misconduct or any breach of information, then in that case,
the authorized person who has the access to the records, that is the manager has to be notified
immediately.

CONCLUSION
It can be summarized that it is very necessary to maintain and enhance the worth and reputation
of the University which can only be done by following the stated rules and regulations for one's
safety, by the staff members, students, employees of University, etc. Also, proper inspection and
analysis should also be done by the University to ensure that everything is going on as per the
directions given and in case of breach, appropriate action should be taken against the guilty
person.

REFERENCES
Books and Journals
Ambrus, M., Rayfuse, R. and Werner, W. eds., 2017. Risk and the regulation of uncertainty in
international law. Oxford University Press.
Anderson, C., 2018. How Cybersecurity Regulation for the Smart Grid Could Upset the Current
Balance of Federal and State Jurisdiction in Electricity Regulation. Nat'l Sec. L. Brief, 8,
p.43.
Axelrod, C. W., 2015, May. Enforcing security, safety and privacy for the Internet of Things.
In 2015 Long Island Systems, Applications and Technology.(pp. 1-6). IEEE.
Casanovas and et.al., 2017. Regulation of Big Data: Perspectives on strategy, policy, law and
privacy. Health and Technology, 7(4), pp.335-349.
Furfaro, A and et.al., 2016, May. Requirements specification of a cloud service for cyber security
compliance analysis. In 2016 2nd International Conference on Cloud Computing
Technologies and Applications (CloudTech).(pp. 205-212). IEEE.
Guiora, A. N., 2017. Cybersecurity: Geopolitics, Law, and Policy. Routledge.
Karabacak, B., Yildirim, S. O. and Baykal, N., 2016. A vulnerability-driven cyber security
maturity model for measuring national critical infrastructure protection
preparedness. International Journal of Critical Infrastructure Protection.15. pp.47-59.
Kittichaisaree, K., 2017. Public international law of cyberspace(Vol. 32). Cham: Springer.
Mittal, S. and Sharma, P., 2017. General Data Protection Regulation (GDPR). Asian Journal of
Computer Science And Information Technology.7(4).
Nemeth, C.P., 2017. Private security and the law. CRC Press.
Porcedda, M. G. and Wall, D. S., 2018. Data science, data crime and the law. Porcedda, MG and
Wall, DS (2018)‘Data Science, Data Crime and the Law’, in, 1000.
Sari, R., 2019. An analysis of the potential impact of data protection and data security law
reform to the position of employees in Indonesian cloud computing industry (Doctoral
dissertation, Lancaster University).
Zhang, D., 2018, October. Big data security and privacy protection. In 8th International
Conference on Management and Computer Science (ICMCS 2018). Atlantis Press.