Transforming Compliance Requirements into Policies