HIBT security compliance checklist