Staff at a critical access hospital with 20 beds can apply the standards as a 1000-bed hospital because _____ was built into the Security Rule. (choose the BEST answer)
A. Flexibility
B. Neutrality of technology
C. Scalability
D. Implementation specifications