Updated: Tuesday, December 9, 2025 compliance confidentiality data security hipaa network security risk security soc2 vulnerability