the administrative safeguards are largely handled by a facility's