legal IT security