BCA 216T Introduction to Security, Acts and Cyber Laws and Cyber Security Notes for GGSIPU BCA Sem 4

Written by Prateek Talwar, Founder, Unnati Educations · Reviewed by Ritik Rawat, B.Tech, Senior Full Stack Developer · Checked against the BCA Scheme and Syllabus PDF, 01.08.2025 · Updated 13 October 2026 · Editorial policy

Scheme: BCA Scheme and Syllabus w.e.f. 2024-25 | Applies to: batch admitted 2024-25 onwards | Verified against: BCA 1st and 2nd Year Common Scheme and Syllabus, 01.08.2025

On this page

1. BCA 216T at a glance: credits, units and exam pattern
2. BCA 216T notes unit-wise
   1. Unit 1: Cyber Ethics, Cyber Crime and Cyber Terrorism
   2. Unit 2: Cyber Crime and Cyber Security
   3. Unit 3: Controlling Cyber Crime by Legislation
   4. Unit 4: Cyber Laws and the Indian IT Act 2000
3. Excerpt: the NIST incident response life cycle (page 28)
4. Do the BCA 216T notes cover the full syllabus?
5. How to write BCA 216T answers
6. BCA 216T exam corner
7. Who writes and checks these notes?
8. BCA 216P lab and other Sem 4 papers
9. BCA 216T FAQs
10. Order the full notes book on WhatsApp

BCA 216T Introduction to Security, Acts and Cyber Laws and Cyber Security at a glance: GGSIPU BCA Sem 4 credits, units and exam pattern

BCA 216T is one of four elective theory papers in Semester 4, taken as a pair with its lab, BCA 216P, alongside the other GGSIPU BCA Semester 4 papers.

Grading follows Ordinance 11.

BCA 216T Introduction to Security, Acts and Cyber Laws and Cyber Security Notes unit-wise: 42 solved two-mark answers and 20 diagrams across 4 units

BCA 216T Unit 1: Cyber Ethics, Cyber Crime and Cyber Terrorism

Unit 1 (pages 5-20) sorts cyber ethics by Mason's PAPA model, defines cyber terrorism under Section 66F, groups hackers by intent and studies Crime-as-a-Service gangs. Key pages: p7, p14, p16. Solved: 10 two-mark answers, 1 model answer; 6 diagrams.

BCA 216T Unit 2: Cyber Crime and Cyber Security

Unit 2 (pages 21-42), the longest, lists crimes from phishing to salami attacks with their sections, then attack vectors and Routine Activity Theory; the security half covers the CIA triad, intrusion detection and India's initiatives. Key pages: p22, p30, p34, p36. Solved: 12 two-mark answers, 1 model answer; 7 diagrams.

Quick look: the five phases of hacking (from page 25)

1. Reconnaissance: gather domain, IP and staff details (WHOIS, social media).
2. Scanning: find open ports and weak services.
3. Gaining access: exploit a weak password or unpatched software.
4. Maintaining access: plant a backdoor or rootkit.
5. Covering tracks: delete or edit logs and hide files.

BCA 216T Unit 3: Controlling Cyber Crime by Legislation

Unit 3 (pages 43-57) moves from the US CFAA (1986) and the Budapest Convention (2001) to the IT Act and the 2023 laws (BNS, BNSS, BSA), then a ten-stage investigation from FIR to prosecution, forensic principles and future trends. Key pages: p46, p49, p51. Solved: 10 two-mark answers, 1 model answer; 4 diagrams.

BCA 216T Unit 4: Cyber Laws and the Indian IT Act 2000

Unit 4 (pages 58-74) gives Carter's typology, Section 43 clause by clause and contaminants such as logic bombs, then the IT Act: objectives, structure, Chapter XI offences, the 2008 amendment and Shreya Singhal (2015). Key pages: p60, p63, p68. Solved: 10 two-mark answers, 1 model answer; 3 diagrams.

The NIST incident response life cycle in cyber security: excerpt from page 28 of the BCA 216T notes

Excerpt from page 28

What counts as a security incident

A security incident is any event that threatens the confidentiality, integrity or availability of information or systems. Typical examples are a malware infection, a data breach, a denial-of-service attack or unauthorised access to an account.

Incident response (IR) is the organised way an organisation prepares for, detects, contains, removes and recovers from such an incident, and then learns from it, so that damage, cost and recovery time stay as low as possible. The team that does this work is the Computer Security Incident Response Team (CSIRT). In India, the national agency is CERT-In.

The life cycle (NIST SP 800-61)

NIST describes four stages: Preparation, Detection and Analysis, Containment, Eradication and Recovery, and Post-Incident Activity. Stages two and three repeat as often as needed. The notes break the cycle into six working steps.

1. Preparation: write the IR policy and plan, form the CSIRT, train staff, install tools such as IDS, antivirus and logging, and keep backups and contact lists ready.
2. Detection and analysis: spot signs of an incident in alerts, logs and user reports, confirm it, judge its scope and severity, and record everything.
3. Containment: limit the damage by isolating infected machines, cutting network links and blocking malicious IP addresses, first short-term, then long-term.
4. Eradication: remove the root cause by deleting malware, closing the vulnerability and disabling compromised accounts.
5. Recovery: restore systems from clean backups, patch them, watch them closely and return to normal work.
6. Post-incident activity: review what happened, why it happened and how the response could be better, update policies, and preserve evidence in case of legal action.

The Indian reporting rule

Under the CERT-In Directions of April 2022, organisations in India must report specified cyber incidents to CERT-In within 6 hours of noticing them and keep their ICT system logs for 180 days.

The same page then opens the next topic, digital forensics: the scientific process of identifying, preserving, collecting, examining, analysing and presenting digital evidence in a way a court will accept.

Do the BCA 216T notes cover the full GGSIPU syllabus?

Yes. Every topic printed in Units I to IV of the official BCA 216T syllabus has its own section in the notes.

Sources: BCA scheme of examination, 2024-25 and BCA 1st and 2nd year syllabus.

The official Unit IV list ends at "Indian IT ACT 2000," with a trailing comma, so we re-check it on every revision. Every course under GGSIPU notes gets the same check.

How to write BCA 216T answers: IT Act section numbers, comparison tables and structured ten-mark law answers

BCA 216T rewards answers that name the offence, its IT Act section and a real example.

• Types of cyber crime: draw the four-category diagram (individuals, property, organisations, society), then 8 to 10 crimes with sections, such as 66C for identity theft.
• Ten-mark IT Act question (page 71): introduction (in force 17 October 2000, UNCITRAL base) → objectives → features → chapter table → offences table → 2008 amendments → merits and limits → conclusion.

Mistakes the notes flag: mixing up Sections 43 and 66 ("43 = civil, 66 = criminal"); quoting Section 66A, struck down in 2015, as live; and citing only Section 65B when, from 1 July 2024, the certificate falls under Section 63 BSA.

Worked two-mark example (page 72): "Differentiate Section 43 and Section 66." Section 43 gives civil liability (compensation) for acts such as unauthorised access or damage; Section 66 makes the same acts a crime when done dishonestly or fraudulently, with up to 3 years and/or ₹5 lakh.

Practise this format on GGSIPU BCA important questions.

BCA 216T exam corner: 42 two-mark solved answers, 4 ten-mark model answers and 32 long questions by unit

1. Unit 1: Define cyber terrorism. An ideologically motivated attack on critical infrastructure to cause fear; Section 66F, up to life imprisonment.
2. Unit 2: What is a Trojan horse? Malware posing as a useful program; it hides harmful actions and does not self-replicate.
3. Unit 3: What is chain of custody? A record of who handled the evidence and when, proving it was not altered.
4. Unit 4: To which documents does the IT Act not apply? Negotiable instruments (not cheques), power of attorney, trust deeds, wills, immovable property sales.

The BCA 216T notes solve 42 two-mark questions and give 4 ten-mark model answers across 4 units, plus 32 ten-mark practice questions.

More practice sits in the BCA 216T important questions.

Who writes and checks the BCA 216T Cyber Security and Cyber Laws notes?

• Prateek Talwar, author of these notes. Founder, Unnati Educations. ACS (ICSI, membership no. 58704, since 2019); B.Com, University of Delhi (SOL), 2012. Author profile
• Ritik Rawat, subject reviewer. Senior Full Stack Developer, Unnati Educations; B.Tech. He checks the malware, IDS and forensics parts. Reviewer profile

These BCA 216T Cyber Security and Cyber Laws IPU notes follow the 2024-25 scheme. The 2026-27 edition uses BNS, BNSS and BSA (from 1 July 2024) and the DPDP Act, 2023. Updated 13 October 2026 under our editorial policy.

After the BCA 216T model answers, the bank of GGSIPU important questions tests your other papers the same way.

BCA 216T and the BCA 216P cyber security lab (11 listed practicals), plus other GGSIPU BCA Sem 4 papers

BCA 216P Introduction to Security, Acts and Cyber Laws and Cyber Security Lab: 0-4-2, 100 marks; 11 listed practicals, 10 to be implemented. BCA 216P cyber security lab notes

Unit → practical numbers (our grouping):

• Unit 2 (malware, IDS) → 1 antivirus, 2 PC protection, 4 key loggers, 8 DoS, 10 honeypot, 11 sniffing.
• Unit 3 (forensics) → 3 and 6 steganography, 5 MD5 and SHA256.
• Unit 4 (Section 43 targets) → 7 access permissions, 9 password capturing.

Other PCE pairs: BCA 212 Introduction to Data Science, BCA 218 Web Development Using Python, BCA 220 Information Security. Core: BCA 202T Operating Systems and BCA 204T Software Testing, with labs BCA 202P and BCA 204P.

Also in Semester 4: BCA 232 Introduction to Logic & Critical Thinking, BCA 234 Health & Wellness (NUES), and one GE-2 paper (BCA 222T Digital Marketing, BCA 224T Principles of Accounting or BCA 226T).

BCA 216T Cyber Security and Cyber Laws notes FAQs

How do I get the full BCA 216T notes?

Order them on WhatsApp: tap "Get Full Notes" at the top or the WhatsApp box at the end. The full BCA 216T notes come only as a printed 74-page book; they are not sold as a PDF. Our desk shares the details there. It follows the official order, Unit I to IV, in simple English.

Is BCA 216T compulsory in GGSIPU BCA Semester 4?

No. BCA 216T is a Programme Core Elective (PCE). In Semester 4 you pick one theory paper and its practical from four pairs: BCA 212 Data Science, BCA 216 Cyber Laws and Cyber Security, BCA 218 Web Development Using Python or BCA 220 Information Security. Choosing BCA 216 means BCA 216T plus the BCA 216P lab.

What is the passing mark for BCA 216T?

BCA 216T is marked out of 100: 40 internal and 60 end-term. The BCA scheme of examination does not print a pass percentage for this paper; its only 40% rule covers a separate, internally evaluated first-semester course. End-term minimums, grading and re-appear rules follow the university's Ordinance 11, so check the current ordinance on ipu.ac.in before exams.

Which BCA 216T unit is the biggest in the notes?

Unit 2, Cyber Crime and Cyber Security, runs to 22 pages (21-42) and clearly has the most exam material: 12 solved two-mark answers, 11 long questions, a model answer on intrusion detection systems and 7 diagrams. Unit 3, on legislation, is the shortest at 15 pages, yet it still carries investigation steps and digital forensics.

Do the BCA 216T notes use the new criminal laws, BNS and BSA?

Yes. The BCA 216T notes explain that the Bharatiya Nyaya Sanhita, Bharatiya Nagarik Suraksha Sanhita and Bharatiya Sakshya Adhiniyam replaced the IPC, CrPC and Indian Evidence Act from 1 July 2024. Electronic evidence is taught under Section 63 BSA, with the older Section 65B and the Anvar P.V. (2014) ruling kept for context and comparison.

Do the BCA 216T notes include the BCA 216P practicals?

No. The BCA 216T notes cover the four theory units only; the BCA 216P lab has its own notes book and page. The theory notes still explain what the lab uses, such as MD5 and SHA-256 hashes, steganalysis, intrusion detection and honeypots, so read the matching theory unit before you start each BCA 216P practical.

Get the full BCA 216T Introduction to Security, Acts and Cyber Laws and Cyber Security Notes on WhatsApp

Book form only: these GGSIPU BCA Sem 4 cyber security notes are sold as a printed English book with 20 diagrams and a revision table per unit, not as a PDF. Order it through WhatsApp.

Order the BCA 216T notes book on WhatsApp (4 units, 74 pages)

Unnati Educations is an independent education provider based in Vikaspuri, Delhi. We are not affiliated with, authorised by, or endorsed by Guru Gobind Singh Indraprastha University (GGSIPU). 'GGSIPU' and 'IPU' are used only to describe the syllabus our notes follow. For official information, visit ipu.ac.in.