Cyber Security (CS-503 (C)) Unit 3 Notes

How unit 3 is examined

This unit covers the IT Act, 2000 and the offences, penalties, jurisdiction and strategies around cyber crime; the IT Act concept and the strategies topic carry most marks, followed by defamation.

Concept of Cyber Crime and the IT Act, 2000

<span style="display:inline-block;padding:.16em .6em;border:1.5px solid currentColor;border-radius:999px;font-size:.68em;font-weight:700;letter-spacing:.06em;text-transform:uppercase;opacity:.75">High weight</span>

Definition. <mark>Cyber crime is any unlawful act where a computer or network is the target, the tool or the place of the crime, and the Information Technology Act, 2000 is the Indian law that gives legal recognition to electronic records and digital signatures and punishes cyber offences.</mark>

Diagram.

<figure class="ds-fig" style="margin:1.4rem 0;overflow-x:auto"><svg xmlns="http://www.w3.org/2000/svg" id="dsfig-u3-01" viewBox="0 0 1175 194" width="1175" height="194" role="img" aria-label="Structure of the IT Act, 2000 (Information Technology Act)"><style>#dsfig-u3-01 .e{stroke:#454C5A;stroke-width:1.4;fill:none}#dsfig-u3-01 .e.hi{stroke:#2340B8;stroke-width:2.6}#dsfig-u3-01 .n{fill:#FFFFFF;stroke:#16181D;stroke-width:1.4}#dsfig-u3-01 .n.hi{fill:#E3E9FC;stroke:#2340B8;stroke-width:2.2}#dsfig-u3-01 .n.rb-b{fill:#16181D;stroke:#16181D}#dsfig-u3-01 .n.rb-r{fill:#BD3227;stroke:#BD3227}#dsfig-u3-01 text{font-family:"JetBrains Mono",ui-monospace,Menlo,Consolas,monospace;font-size:13px}#dsfig-u3-01 .t{fill:#16181D;font-weight:500}#dsfig-u3-01 .t.inv{fill:#FFFFFF;font-weight:700}#dsfig-u3-01 .kd{stroke:#16181D;stroke-width:1.2}#dsfig-u3-01 .dot{fill:#16181D}#dsfig-u3-01 .ann{fill:#2340B8;font-size:11px;font-weight:700}#dsfig-u3-01 .lbl{fill:#6F7787;font-family:system-ui,-apple-system,sans-serif;font-size:12px;font-weight:700}#dsfig-u3-01 .ptr{fill:#2340B8;font-size:12px;font-weight:700}#dsfig-u3-01 .ah{fill:#454C5A}#dsfig-u3-01 .ah.hi{fill:#2340B8}#dsfig-u3-01 .wl rect{fill:#FFFFFF;stroke:#DCE0E7}#dsfig-u3-01 .wl .t{font-size:12px;font-weight:700}#dsfig-u3-01 .wl.hi rect{fill:#2340B8;stroke:#2340B8}#dsfig-u3-01 .wl.hi .t{fill:#FFFFFF}html.dark #dsfig-u3-01 .e{stroke:#B1B7C3}html.dark #dsfig-u3-01 .e.hi{stroke:#8FA3FF}html.dark #dsfig-u3-01 .n{fill:#161920;stroke:#E6E8ED}html.dark #dsfig-u3-01 .n.hi{fill:#1E2748;stroke:#8FA3FF}html.dark #dsfig-u3-01 .n.rb-b{fill:#E6E8ED;stroke:#E6E8ED}html.dark #dsfig-u3-01 .n.rb-r{fill:#FF7E71;stroke:#FF7E71}html.dark #dsfig-u3-01 .t{fill:#E6E8ED}html.dark #dsfig-u3-01 .t.inv{fill:#0F1115}html.dark #dsfig-u3-01 .kd{stroke:#E6E8ED}html.dark #dsfig-u3-01 .dot{fill:#E6E8ED}html.dark #dsfig-u3-01 .ann{fill:#8FA3FF}html.dark #dsfig-u3-01 .lbl{fill:#858D9C}html.dark #dsfig-u3-01 .ptr{fill:#8FA3FF}html.dark #dsfig-u3-01 .ah{fill:#B1B7C3}html.dark #dsfig-u3-01 .ah.hi{fill:#8FA3FF}html.dark #dsfig-u3-01 .wl rect{fill:#161920;stroke:#2A2E37}html.dark #dsfig-u3-01 .wl.hi rect{fill:#8FA3FF;stroke:#8FA3FF}html.dark #dsfig-u3-01 .wl.hi .t{fill:#0F1115}</style><defs><marker id="ah5" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path class="ah" d="M0,1 L9,5 L0,9 z"/></marker><marker id="ahh5" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path class="ah hi" d="M0,1 L9,5 L0,9 z"/></marker></defs><line class="e" x1="532.1" y1="37" x2="128.5" y2="101"/><line class="e" x1="532.1" y1="37" x2="347" y2="101"/><line class="e" x1="532.1" y1="37" x2="553.8" y2="101"/><line class="e" x1="532.1" y1="37" x2="935.8" y2="101"/><line class="e" x1="128.5" y1="101" x2="59.5" y2="165"/><line class="e" x1="128.5" y1="101" x2="197.5" y2="165"/><line class="e" x1="553.8" y1="101" x2="477" y2="165"/><line class="e" x1="553.8" y1="101" x2="630.5" y2="165"/><line class="e" x1="935.8" y1="101" x2="776" y2="165"/><line class="e" x1="935.8" y1="101" x2="894" y2="165"/><line class="e" x1="935.8" y1="101" x2="1000.5" y2="165"/><line class="e" x1="935.8" y1="101" x2="1095.5" y2="165"/><rect class="n" x="479.1" y="22" width="106" height="30" rx="8"/><text class="t" x="532.1" y="37" dy=".35em" text-anchor="middle">IT Act 2000</text><rect class="n" x="52" y="86" width="153" height="30" rx="8"/><text class="t" x="128.5" y="101" dy=".35em" text-anchor="middle">Legal recognition</text><rect class="n" x="14" y="150" width="91" height="30" rx="8"/><text class="t" x="59.5" y="165" dy=".35em" text-anchor="middle">E-records</text><rect class="n" x="121" y="150" width="153" height="30" rx="8"/><text class="t" x="197.5" y="165" dy=".35em" text-anchor="middle">Digital signature</text><rect class="n" x="290" y="86" width="114" height="30" rx="8"/><text class="t" x="347" y="101" dy=".35em" text-anchor="middle">E-governance</text><rect class="n" x="457.8" y="86" width="192" height="30" rx="8"/><text class="t" x="553.8" y="101" dy=".35em" text-anchor="middle">Offences and penalties</text><rect class="n" x="420" y="150" width="114" height="30" rx="8"/><text class="t" x="477" y="165" dy=".35em" text-anchor="middle">Sec 43 civil</text><rect class="n" x="550" y="150" width="161" height="30" rx="8"/><text class="t" x="630.5" y="165" dy=".35em" text-anchor="middle">Sec 65-74 criminal</text><rect class="n" x="882.8" y="86" width="106" height="30" rx="8"/><text class="t" x="935.8" y="101" dy=".35em" text-anchor="middle">Authorities</text><rect class="n" x="727" y="150" width="98" height="30" rx="8"/><text class="t" x="776" y="165" dy=".35em" text-anchor="middle">Controller</text><rect class="n" x="841" y="150" width="106" height="30" rx="8"/><text class="t" x="894" y="165" dy=".35em" text-anchor="middle">Adjudicator</text><rect class="n" x="963" y="150" width="75" height="30" rx="8"/><text class="t" x="1000.5" y="165" dy=".35em" text-anchor="middle">CERT-In</text><rect class="n" x="1054" y="150" width="83" height="30" rx="8"/><text class="t" x="1095.5" y="165" dy=".35em" text-anchor="middle">Tribunal</text></svg><figcaption style="font-size:.82em;opacity:.72;margin-top:.45rem">Structure of the IT Act, 2000 (Information Technology Act)</figcaption></figure>

Key points.

The Act came into force on 17 October 2000 and is based on the UNCITRAL Model Law on Electronic Commerce, 1996; it extends to the whole of India and, under section 75, to offences committed outside India that involve a computer in India.
Its first objective is legal recognition of electronic records and digital signatures, so that e-contracts and e-transactions are as valid as paper ones.
It enables e-governance, that is, filing of forms and documents with government offices and retention of records in electronic form.
It defines and punishes cyber offences such as tampering with source code (section 65), computer-related offences including hacking (section 66), obscene publication (section 67) and cyber terrorism (section 66F).
It amended four older laws: the Indian Penal Code 1860, the Indian Evidence Act 1872, the Bankers' Books Evidence Act 1891 and the Reserve Bank of India Act 1934.
It sets up authorities: the Controller of Certifying Authorities, the Adjudicating Officer (section 46), the Cyber Appellate Tribunal (now TDSAT) and CERT-In (section 70B).
The IT (Amendment) Act, 2008, in force from 27 October 2009, added section 66A-66F offences, 43A on data protection and 67A/67B; section 66A was struck down by the Supreme Court in Shreya Singhal v. Union of India (2015).
The Indian Evidence Act, 1872 decides admissibility of proof in court; through section 65B a computer output is admissible if accompanied by a certificate, so electronic records can be produced as evidence.

Answer frame. Open with the definition of the IT Act; draw the structure tree; list objectives (points 2-3), then offences and provisions (4, 7), then authorities and penalties (6); close by stating that the Act gives India a legal base for e-commerce and for prosecuting cyber crime. For the Evidence Act part, add point 8 in two lines.

Pitfall: Do not say section 66A is still in force; it was declared unconstitutional in 2015.

Asked: [7 marks] (Dec 2020, Jun 2020) What is IT Act 2000? Write the features of IT Act 2000. / What do you know about IT Act 2000? Explain in brief. Asked: [7 marks] (Jun 2020, Nov 2022, Dec 2025) Write down the objectives and some of the important provisions of Cyber Crimes in the IT Act, 2000. / Explain the concept of cyber-crime in the context of the IT Act, 2000. Asked: [7 marks] (Dec 2024) Enlighten Information Technology Act, 2000. What do you know about Indian Evidence Act, 1872?

Hacking

Definition. Hacking is gaining unauthorised access to a computer, network or data, or altering or destroying it, without the owner's permission.

Key points.

Under section 66 read with section 43 it is an offence to dishonestly or fraudulently damage, delete, alter or gain access to a computer system.
Punishment under section 66 is imprisonment up to 3 years, or fine up to Rs 5 lakh, or both.
Hackers are classed as white hat (ethical, authorised), black hat (criminal) and grey hat (unauthorised but without malicious intent).

Teenage Web Vandals

Definition. Teenage web vandals are young, often unskilled offenders who deface websites or disrupt services for thrill or recognition, using ready-made tools.

Key points.

Web defacement replaces a site's pages with the vandal's message and is punished under sections 43 and 66 of the IT Act.
The motive is fame, dares or protest, not money, so the harm is loss of reputation and downtime.
Prevention is patching the web server, strong passwords and monitoring page integrity.

Cyber Fraud and Cheating

Definition. Cyber fraud is deceiving a person through a computer or the Internet to gain money or property, and cheating is inducing someone by deception to deliver property.

Key points.

Section 66C punishes identity theft and section 66D cheating by personation using a computer resource, each with up to 3 years and fine up to Rs 1 lakh.
IPC section 420 (cheating) and sections 463-471 (forgery) are also applied to online fraud.
Examples are phishing, fake online shops, lottery e-mails and credit card fraud.

Defamation

Definition. <mark>Defamation is making or publishing a false statement, by words, signs or visible representation, that harms a person's reputation, and cyber defamation is doing this through computers, e-mail, social media or websites.</mark>

Key points.

IPC section 499 defines defamation and explicitly covers imputations made about a person that lower their reputation in the eyes of others; publication online counts as publication.
Section 500 punishes it with simple imprisonment up to 2 years, or fine, or both.
Section 501 punishes printing or engraving defamatory matter knowing it to be defamatory, and section 502 punishes selling such printed or engraved material; both carry up to 2 years.
Section 503 (criminal intimidation) and section 509 (insulting the modesty of a woman) are often added when posts threaten or insult.
Cyber defamation spreads faster and wider than print because posts are permanent, shareable and anonymous, so harm is greater.
Publishing an obscene defamatory post also attracts section 67 of the IT Act; the IT Act's own section 66A no longer exists, so IPC is the main remedy. The IPC has been replaced by the Bharatiya Nyaya Sanhita, 2023, where defamation is section 356.

Answer frame. Open with the definition of defamation and then cyber defamation; list how it happens (social media, e-mail, websites); develop points 1-4 as the IPC provisions in section order; close with the link to the IT Act and the remedy of a criminal complaint or civil suit for damages.

Asked: [7 marks] (Jun 2020, Dec 2024) Explain defamation in the context of cyber crime. List down some important provision about cyber defamation mentioned in Indian Penal Code 1860.

Harassment and E-mail Abuse

Definition. Cyber stalking is repeatedly following, watching or harassing a person online through e-mail, social media, messages or tracking, causing fear or distress.

Key points.

Forms include threatening or obscene e-mails, monitoring social media, posting false information, tracking location and impersonating the victim.
Impact on the victim is fear, stress, loss of privacy and sometimes withdrawal from the Internet.
The legal provisions are IPC section 354D (stalking), section 509 and, from the IT Act, sections 66C, 66D, 66E and 67.
To tackle it, keep evidence such as screenshots, block and report the stalker, tighten privacy settings, and file a complaint with the cyber cell.

Asked: [7 marks] (Nov 2019) Define the term Cyber stalking. How can we tackle this cyber crime?

Other IT Act Offences

Definition. Besides hacking, the IT Act punishes data theft, viruses, identity theft, obscenity and cyber terrorism, and controls them through adjudication, CERT-In and investigation.

Key points.

Section 43 covers unauthorised access, data theft, virus introduction and denial of service; section 65 covers tampering with source documents.
Sections 66B-66F cover stolen computers, identity theft, cheating by personation, privacy violation and cyber terrorism (life imprisonment).
Sections 67, 67A and 67B cover obscene, sexually explicit and child pornographic material; section 70 covers protected systems.
Control mechanism: the Adjudicating Officer decides civil claims, CERT-In handles incidents, an officer of Inspector rank investigates (section 78) and police may arrest without warrant (section 80).

Asked: [7 marks] (Jun 2025) What are the different types of offence in Information Technology Act, 2000? Discuss cyber offence control mechanism under this Act. Asked: [7 marks] (Dec 2025) Discuss offences such as Hacking, cyber fraud, cheating, defamation and e-mail abuse under the IT Act.

Monetary Penalties

Definition. Monetary penalties are compensation and fines the IT Act imposes on offenders, decided by an Adjudicating Officer under section 46.

Key points.

Section 43 makes a person who damages a computer, steals data or spreads a virus liable to pay compensation to the victim; the 2008 Act removed the Rs 1 crore ceiling.
Section 44 penalises failure to furnish information (Rs 1.5 lakh), to file returns (Rs 5,000 per day) and to maintain books (Rs 10,000 per day).
Section 45 is the residuary penalty, up to Rs 25,000.
The Adjudicating Officer hears claims up to Rs 5 crore, larger claims go to civil court, and appeals go to the Cyber Appellate Tribunal.

Asked: [7 marks] (Nov 2023) What are the monetary penalties under IT Act 2000? Asked: [7 marks] (Dec 2025) Explain monetary penalties, jurisdiction and nature of criminality in cyber-crimes.

jurisdiction and Cyber Crimes

Definition. Jurisdiction is the power of a court or authority to try a cyber offence, which is hard because the Internet has no borders.

Key points.

Section 1(2) and section 75 give the Act extra-territorial reach when the offence involves a computer or network located in India.
Territorially, Indian courts try offences committed in India under IPC sections 3 and 4.
Activities covered are hacking, data theft, fraud, obscenity, defamation and cyber terrorism.
Section 61 bars civil courts where the Adjudicating Officer has power, and section 81 gives the Act overriding effect.

Asked: [7 marks] (Nov 2023) What are the different activities under the jurisdiction of cybercrime laws?

Nature of Criminality

Definition. Nature of criminality means the intent, conduct and harm that make a computer act a crime.

Key points.

A cyber crime needs a guilty act (actus reus) and a guilty mind (mens rea), such as intent to cause loss or gain.
The computer can be the target, the tool or incidental to the crime.
Anonymity, speed, borderless reach and easy evidence deletion make offenders hard to trace.
Motives are money, revenge, thrill, ideology and espionage.

Strategies to tackle Cyber Crime and Trends

Definition. <mark>Tackling cyber crime needs a multi-pronged strategy combining legal, technical and awareness measures, because no single measure stops an offender who is anonymous and borderless.</mark>

Diagram.

<figure class="ds-fig" style="margin:1.4rem 0;overflow-x:auto"><svg xmlns="http://www.w3.org/2000/svg" id="dsfig-u3-02" viewBox="0 0 424 389.6" width="424" height="389.6" role="img" aria-label="S = strategy to tackle cyber crime; L = legal, T = technical, A = awareness; C = reduced cyber crime"><style>#dsfig-u3-02 .e{stroke:#454C5A;stroke-width:1.4;fill:none}#dsfig-u3-02 .e.hi{stroke:#2340B8;stroke-width:2.6}#dsfig-u3-02 .n{fill:#FFFFFF;stroke:#16181D;stroke-width:1.4}#dsfig-u3-02 .n.hi{fill:#E3E9FC;stroke:#2340B8;stroke-width:2.2}#dsfig-u3-02 .n.rb-b{fill:#16181D;stroke:#16181D}#dsfig-u3-02 .n.rb-r{fill:#BD3227;stroke:#BD3227}#dsfig-u3-02 text{font-family:"JetBrains Mono",ui-monospace,Menlo,Consolas,monospace;font-size:13px}#dsfig-u3-02 .t{fill:#16181D;font-weight:500}#dsfig-u3-02 .t.inv{fill:#FFFFFF;font-weight:700}#dsfig-u3-02 .kd{stroke:#16181D;stroke-width:1.2}#dsfig-u3-02 .dot{fill:#16181D}#dsfig-u3-02 .ann{fill:#2340B8;font-size:11px;font-weight:700}#dsfig-u3-02 .lbl{fill:#6F7787;font-family:system-ui,-apple-system,sans-serif;font-size:12px;font-weight:700}#dsfig-u3-02 .ptr{fill:#2340B8;font-size:12px;font-weight:700}#dsfig-u3-02 .ah{fill:#454C5A}#dsfig-u3-02 .ah.hi{fill:#2340B8}#dsfig-u3-02 .wl rect{fill:#FFFFFF;stroke:#DCE0E7}#dsfig-u3-02 .wl .t{font-size:12px;font-weight:700}#dsfig-u3-02 .wl.hi rect{fill:#2340B8;stroke:#2340B8}#dsfig-u3-02 .wl.hi .t{fill:#FFFFFF}html.dark #dsfig-u3-02 .e{stroke:#B1B7C3}html.dark #dsfig-u3-02 .e.hi{stroke:#8FA3FF}html.dark #dsfig-u3-02 .n{fill:#161920;stroke:#E6E8ED}html.dark #dsfig-u3-02 .n.hi{fill:#1E2748;stroke:#8FA3FF}html.dark #dsfig-u3-02 .n.rb-b{fill:#E6E8ED;stroke:#E6E8ED}html.dark #dsfig-u3-02 .n.rb-r{fill:#FF7E71;stroke:#FF7E71}html.dark #dsfig-u3-02 .t{fill:#E6E8ED}html.dark #dsfig-u3-02 .t.inv{fill:#0F1115}html.dark #dsfig-u3-02 .kd{stroke:#E6E8ED}html.dark #dsfig-u3-02 .dot{fill:#E6E8ED}html.dark #dsfig-u3-02 .ann{fill:#8FA3FF}html.dark #dsfig-u3-02 .lbl{fill:#858D9C}html.dark #dsfig-u3-02 .ptr{fill:#8FA3FF}html.dark #dsfig-u3-02 .ah{fill:#B1B7C3}html.dark #dsfig-u3-02 .ah.hi{fill:#8FA3FF}html.dark #dsfig-u3-02 .wl rect{fill:#161920;stroke:#2A2E37}html.dark #dsfig-u3-02 .wl.hi rect{fill:#8FA3FF;stroke:#8FA3FF}html.dark #dsfig-u3-02 .wl.hi .t{fill:#0F1115}</style><defs><marker id="ah6" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path class="ah" d="M0,1 L9,5 L0,9 z"/></marker><marker id="ahh6" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path class="ah hi" d="M0,1 L9,5 L0,9 z"/></marker></defs><path class="e" d="M198.6,53.4 L54.8,197.2" marker-end="url(#ah6)"/><path class="e" d="M212,59 L212,191" marker-end="url(#ah6)"/><path class="e" d="M225.4,53.4 L369.2,197.2" marker-end="url(#ah6)"/><path class="e" d="M54.8,223.9 L195.6,336.5" marker-end="url(#ah6)"/><path class="e" d="M212,231 L212,328.6" marker-end="url(#ah6)"/><path class="e" d="M369.2,223.9 L228.4,336.5" marker-end="url(#ah6)"/><circle class="n" cx="212" cy="40" r="18"/><text class="t" x="212" y="40" dy=".35em" text-anchor="middle">S</text><circle class="n" cx="40" cy="212" r="18"/><text class="t" x="40" y="212" dy=".35em" text-anchor="middle">L</text><circle class="n" cx="212" cy="212" r="18"/><text class="t" x="212" y="212" dy=".35em" text-anchor="middle">T</text><circle class="n" cx="384" cy="212" r="18"/><text class="t" x="384" y="212" dy=".35em" text-anchor="middle">A</text><circle class="n" cx="212" cy="349.6" r="18"/><text class="t" x="212" y="349.6" dy=".35em" text-anchor="middle">C</text></svg><figcaption style="font-size:.82em;opacity:.72;margin-top:.45rem">S = strategy to tackle cyber crime; L = legal, T = technical, A = awareness; C = reduced cyber crime</figcaption></figure>

Key points.

Legislation such as the IT Act and IPC must be updated regularly so that new offences are covered and offenders are punished.
Technical measures include firewalls, antivirus, encryption, intrusion detection, strong authentication and timely patching.
Education and awareness teach users about phishing, strong passwords and safe use of social media.
Reporting through cyber cells and the national portal, backed by trained police and forensic labs, ensures crimes are investigated.
Organisations should keep security policies, backups, incident response plans and employee training.
International cooperation, through extradition and mutual legal assistance treaties, is needed for offences that cross borders.
Trends: IoT devices are growing fast, are often shipped with default passwords and rarely patched, so they form a huge attack surface; the Mirai botnet of 2016 used them for massive DDoS attacks.
Cyber crime will therefore affect IoT attacks in coming years through botnets, data breaches and ransomware, and AI-enabled phishing and cloud attacks will also rise, so defence must move to secure-by-design devices and regular updates.

Answer frame. For the strategies question open with the need for a multi-pronged approach, draw the legal-technical-awareness diagram, develop points 1-6 in that order and close with awareness as the first defence. For the IoT question open with the growth of IoT, develop points 7-8 with Mirai as the example, and close with the need for secure-by-design devices.

Asked: [7 marks] (Jun 2020, Nov 2022, Jun 2025, Dec 2025) List down some of the strategies to tackle cyber crime. / Write short note on "Strategies to tackle Cyber Crime and Trends". / Discuss strategies to tackle cybercrime and emerging trends in cyber security. Asked: [7 marks] (Nov 2023) Will cybercrime in the coming years affect hackers' attacks aimed at technology devices of the Internet of things?

Last-minute revision

The IT Act, 2000 is based on the UNCITRAL Model Law 1996 and came into force on 17 October 2000; the 2008 amendment came into force on 27 October 2009.
The IT Act amended the IPC, Indian Evidence Act, Bankers' Books Evidence Act and RBI Act.
Section 43 is compensation for damage; section 65 is tampering with source documents; section 66 is hacking (3 years, Rs 5 lakh).
Sections 66C, 66D and 66F are identity theft, cheating by personation and cyber terrorism (life imprisonment).
Sections 67, 67A and 67B are obscenity, sexually explicit material and child pornography.
Section 66A was struck down in 2015 (Shreya Singhal).
IPC 499 defines defamation, 500 punishes it (2 years), 354D is stalking.
Section 44 penalties are Rs 1.5 lakh, Rs 5,000 per day and Rs 10,000 per day; section 45 is Rs 25,000.
Adjudicating Officer (section 46) hears claims up to Rs 5 crore; appeals go to the Cyber Appellate Tribunal.
Sections 1(2) and 75 give extra-territorial jurisdiction.
Strategy is legal plus technical plus awareness.

Memory hooks

"43 damages, 65 tampers, 66 hacks, 67 obscene" for the main sections in order.
"L-T-A" for legal, technical and awareness strategies.
"499 defines, 500 punishes" for IPC defamation.
"Mirai = mass IoT botnet" for the IoT trend.

Coverage checklist

Concept of Cyber Crime and the IT Act, 2000: Q1, Q2, Q3 (Dec 2020, Jun 2020, Nov 2022, Dec 2024, Dec 2025).
Hacking: no past question; covered by the Dec 2025 offences question.
Teenage Web Vandals: no past question.
Cyber Fraud and Cheating: no past question; covered by the Dec 2025 offences question.
Defamation: Q4 (Jun 2020, Dec 2024).
Harassment and E-mail Abuse: Q5 (Nov 2019).
Other IT Act Offences: Q7, Q11 (Jun 2025, Dec 2025).
Monetary Penalties: Q6, Q12 (Nov 2023, Dec 2025).
jurisdiction and Cyber Crimes: Q10, Q12 (Nov 2023, Dec 2025).
Nature of Criminality: Q12 (Dec 2025).
Strategies to tackle Cyber Crime and Trends: Q8, Q9 (Jun 2020, Nov 2022, Nov 2023, Jun 2025, Dec 2025).

Account

Cyber Security (CS-503 (C)) - Unit 3 Short Notes

How unit 3 is examined

Concept of Cyber Crime and the IT Act, 2000

Hacking

Teenage Web Vandals

Cyber Fraud and Cheating

Defamation

Harassment and E-mail Abuse

Other IT Act Offences

Monetary Penalties

jurisdiction and Cyber Crimes

Nature of Criminality

Strategies to tackle Cyber Crime and Trends

Last-minute revision

Memory hooks

Coverage checklist