Saving practices from complicated security compliance