This paper discusses the challenges associated with security and compliance solutions and a sound methodology that using an incremental approach.