This article aims to identify and define some of the legal issues, the computer misuses and the information misbehaviour associated with IT security that are increasingly a matter for civil litigation, criminal cases and national policy where fighting serious organised crime and cybercrime are concerned. The author, Brunella Longo, investigates this subject, suggests criteria and offers practical guidance for researching the issues. The article also includes references to relevant legislation, normative technical standards and best practices that have emerged as a result of corporate IT developments.