Compliance automation to confound cyber criminals