Is a software-defined compliance the answer to future compliance challenges?