Any person listed under 20 CAR § 5-102(2) must designate an individual to be a responsible official who must be approved by the United States Secretary of Health and Human Services or the Administrator of Health and Human Services, following a security risk assessment by the United States Attorney General outlined in 72 C.F.R. § 73.9.