Methodology for Gap Analysis and Compliance Management