The HIPAA Security Rule contains administrative safeguards in the form of security standards. One of these standards requires covered entities and business associates to implement a security awareness and training program for all workforce members. Implementation consists of (among other activities) developing procedures for guarding against, detecting, and reporting malicious software. The government has not “certified” any particular antivirus software program as the “HIPAA Antivirus [...]