Maintaining a registry of entities, business associates or sub contractors that have met the NIST 800 standards