Understanding the IT regulatory compliance