change management bugging computer security tempest network security lemans bug sweep sdlc gto bugs oxley internet security audit debugging sarbanes sox hipaa development compliance computer consulting