Procedures for testing, enforcing, and investigating breaches of policy

It is essential that a security professional is able to resolve and respond to cyber law inquiries and incidents while avoiding unnecessary litigation. 

In 500-750 words, explain why a legal cyber inquiry into an organization would need to be made and the process that would then be followed (consider the Napster ruling). Within your explanation, make sure to address the following:

1. Procedures for testing, enforcing, and investigating breaches of policy
2. Data breach notification laws
3. The process for an incident response to a ransomware event
4. The laws and regulations will often define sensitive or protected data and the reporting requirements in the case of a data breach. Failure to follow the prescribed process can often result in fines or other penalties. From the Christian worldview, which one should be considered first: protecting privacy or complying with the laws and regulations?