STANDARDS LIKE ISO FOR RISK MANAGEMENT PROVIDE GUIDELINES FOR LEGAL COMPLIANCE.