e-commerce cobit hipaa password policy compliance network security policy itil jdbc outsourcing policy itsm asp medical c++ it governance java servlets java j2ee jsp network authentication policy healthcare .net