Computer software to provide users with assessment, auditing, alerting and detecting policy violations and reporting of their IT security compliance based on best practices, industry standards and security controls or user-defined security and compliance policies