VAPT for Regulatory Compliance