according to hipaa guidelines the computer used to process phi should use an installed