Any public or private organization that does business with and/or receives funds from the US federal government needs to institute FISMA standards as defined by NIST CFM. These new compliance requirements have impacted many small to large organizations where translating and presenting cybersecurity related investments to stakeholders with little to no security knowledge has proven to be difficult. This makes it somewhat challenging for organizations to become compliant with required standards and frameworks. Moreover, cybersecurity compliance requires different business functions and departments which traditionally act independently, to effectively communicate and work with each other in order to fulfill compliance goals. Cybersecurity compliance not only involves the IT department, but also requires the involvement of all the employees and even third-party contractors to reduce the attack surface and mitigate the risk efficiently.