data business database network authentication policy it governance management customer recovery list network security policy password policy medical yellow pages outsourcing policy crm cobit results relationship hipaa itil healthcare compliance analysis itsm