HIBT security audit checklist