Legal Aspect of Information Security