how to achieve cybersecurity compliance