Towards a compliance requirement management for SMSEs: a model and architecture · Study