SMB compliance checklist