security threat model compliance hipaa information security consulting security management buffer overflow network security computer security security program manager medical firewall audit smart card module software vulnerabilities exploit smart card deployment software security healthcare antivirus