Its no Longer Tough to Report Health IT Security Compliance