Become familiar with the IT professional's obligations for complying with applicable laws and rules and for reporting security-related incidents.