A security professional is researching compliance and the law in order to define security goals. Which domain does this scenario describe?