In regards to HIPAA Standards,what are the requirements to be addressed in the written policies of covered entities