Critical Information Infrastructure Protection and the Law