information password management cigarette compliance hipaa pci compliance stop smoking consulting pci data standard regulatory compliance network security audit medical healthcare enterprise security management management security remediation vulnerability management provisioning security vulnerability assessment addiction output management