security threat model hipaa compliance audit medical software security healthcare buffer overflow cpa conseil security program manager consulting firewall accounting smart card module software vulnerabilities exploit smart card deployment security management antivirus