COMPLIANCE-BASED IT SECURITY SERVICE