SSCP - Security Concepts and Practices - Assessing compliance requirements