Hot or not: Effective regulatory compliance and security management