SAP Security, Identity Management, Compliance frameworks, Security policies and procedures for SAP, Access control mechanisms, Regulatory requirements related to information security