Implications of OCR audit controls enforcement and the role of audit trails in litigation