As new regulations and legislation are mandated and existing regulations are changed, organizations face a difficult challenge in becoming compliant. To complicate matters, the language of compliance is intentionally vague and subjective in order to provide a general direction on best practices, rather than clear instructions.