Abstract: A method includes reading a standards content into a compliance standard input processor and loading a security requirement into a compliance mapping database. The method also includes inputting a security requirement score for each of a set of security requirements for a product, receiving a request for a compliance report for the product based on the standards content, and matching a correlation between the product and the standards content. The method also includes outputting the compliance report for the product, the compliance reporting having the set of security requirements for the product and the security requirement score for the product.