Information security and the law

Law and regulation increasingly affect how information security is implemented in organisations. This article explores how information security can also make a positive contribution by helping a business comply with laws, regulations and guidance on governance and on e-commerce by adding value. It also discusses some steps which an information security manager can take to achieve this.