A Uniform Approach to Information Security Compliance