CISSP - Security Education and Awareness - Compliance and Legal Considerations