Computer software for analysis of computer system security risks, for control of access to information technology applications and physical locations and to ensure compliance with company policies, practices and regulations