Legal and Ethical Management Issues in Information Security: Qualitative Analysis