1. Describe the functions of and relationships among laws, regulations, and professional organizations in information security.

2. Explain the differences between laws and ethics

3. Identify major national laws that affect the practice of information security

4. Discuss the role of privacy as it applies to law and ethics in information security

5. Explain how laws are rules that mandate or prohibit certain behavior in society. They are drawn from ethics, which define socially acceptable behaviors.

( you can use this book Michael E. Whitman, Principles of Information Security, 6th Edition )