Law, ethics & your first audit

The rules that turn these skills into a profession instead of a crime, and the finish of your first portfolio piece. Across five short topics you will learn the Computer Misuse Act, UK data protection law, how authorised testing and scope work, how to disclose a flaw responsibly, and you will complete and write up your Personal Security Audit. Each idea is taught through a real case.

1. 1
   The Computer Misuse Act 1990Start

   Learn the one UK law that defines the line, then see a skilled consultant land on the wrong side of it by accident.

   ~18 min3 ideas1 real case1 lab
2. 2
   UK GDPR and data protectionUp next

   Learn what data protection law actually requires, then see the fine that put a number on getting security wrong.

   ~17 min3 ideas1 real case1 lab
3. 3
   Authorised testing, consent and scopeUp next

   Learn what turns hacking into a lawful profession, then see testers arrested mid-job because the paperwork did not reach far enough.

   ~17 min3 ideas1 real case1 lab
4. 4
   Responsible disclosureUp next

   Learn the right way to report a flaw you have found, then see what happens when doing the right thing is met with a threat to prosecute.

   ~16 min3 ideas1 real case1 lab
5. 5
   Finish your Personal Security AuditUp next

   Turn everything you have learned into your first real portfolio piece, and see why a personal audit is not a trivial exercise.

   ~20 min3 ideas1 real case1 lab