Security-First Compliance for Small Businesses