Develop a research report or implementation plan concerning legal and ethical best practices and mandated requirements that pertain to information security.