legal compliance in security