Be prepared for a hipaa security audit