https://lecrab.com/2021/04/08/nist-and-hipaa-is-there-a-password-connection/