Regulatory compliance consulting in the field of information technology, namely, information security