Administrative safeguards are administrative actions, and policies and prodedures, to manage the selection, development, implementation, and maintenance of security measures to protect electronic protected health information (PHI) and to manage the conduct of the covered entity's workforce in relation to the protection of that information.