Not only must information security professionals be skilled in many areas of security execution, but they must also be prepared to assist companies in bringing wrongdoers to justice. To do this, security pros must be knowledgeable on laws pertaining to privacy, civil and criminal activity.