encryption security user-proof protection iso 27001 authentication web design cpa the net effect hipaa information security policies internet and society single console internal controls strong file-based encryption information security policy stephen fry accounting cryptography audit