legal aspects of cyber policies