Why cybersecurity is a legal issue