encryption user-proof protection hipaa cryptography sox single console itil cobit section 404 security tools authentication sox tools strong file-based encryption audit it governance itsm security compliance