Legal and Ethical Issues in Information Security