Critical information infrastructure protection and the law :an overview of key issues