Is a HIPAA audit coming? 8 critical steps in preparing