Data Security

Language

French

Main themes

The question of security inevitably accompanies any project for managing, preserving and implementing an access policy for documents and data. The presence of hybrid documents (paper and electronic versions) or, increasingly, exclusively in electronic format, raises a major issue of availability, integrity, confidentiality, non-repudiation and authentication of the data contained in these documents. Legal rules are required in this area: obligations to take technical and organisational security measures in the presence of personal data and to declare any data breach to the Data Protection Authority; and criminal prosecution of both internal and external hacking. The ISO 27000 standard, a general standard on information systems security, also merits attention.

Learning outcomes

At the end of this learning unit, the student is able to :

At the end of this unit, the student will be able to: Know the legal requirements for data security; Develop a data security policy that includes all relevant aspects (technical and organisational); Identify situations of unauthorised access (external and internal hacking).

Content

• The specific provisions of the GDPR relating to the duty of security of personal data and data breaches;
• The Computer Crime Act and relevant case law.
• The ISO 27000 standard on information security: Information technology - Security techniques - Information security management systems.
• The Belgian Data Protection Authority: its competences and action.

Teaching methods

Lectures presenting the theoretical material illustrated by numerous case studies and real-life situations.
Active participation of students, in particular to familiarise them with the drafting of contractual clauses or public procurement contracts, involving preparatory work, individually or in groups depending on the exercise, with a presentation or collective discussion.
Students will be provided with a slide show and a reading portfolio containing legislative, case law and doctrinal documents.

Evaluation methods

The assessment will be based on individual student performances during the semester (e.g. drafting of clauses, correction of false contracts, resolution of casus, ...) and on a written exam including comprehension questions and application questions (by solving practical cases corresponding to those seen in the course).

Faculty or entity

EHAC