IT Act ke under kya hai cyber crime ka definition

Maine ek case dekhaya tha jismein kisi company ne data theft ke case mein accused ko guilty karke 5-7 years jail ki sentence lagayi thi. Par kuch articles mein pata chala ki cybercrime ke under kitna bhi chota se offence ho sakta hai, usmein 3 years ki sentence lag sakti hai. To main confusion mein hoon, kya cybercrime ke under data theft ke liye 5-7 years ki sentence lagne chahiye, ya 3 years? Kya cybercrime ke under punishment lagane ke liye court ke paas kayi options hai? Aur kya iska koi rule ya regulation hai jo cybercrime ke under punishment decide karta hai?