Establishing Regulatory Compliance for Software Requirements