HIPAA Security Remediation: Challenges and Solution Options