A cool experiment in measuring FISMA compliance