Automating Cybersecurity Compliance