Legal security compliance gap-analysis