rating hipaa sox basel 2 asp hosting basel consulting management spem omg controlling six sigma for software audit beratung software process methodologies compliance