Password Management with SOC-2 Requirements