Requirements governance for healthcare IT projects with HIPAA compliance and clinical workflow validation.