Report: Only half of U.S. hospitals have infrastructure to support two-factor authentication. Some healthcare information security leaders say implementation of the technology at many facilities is likely relatively narrow. The ONC report is based on the findings of an American Hospital Association 2014 survey of almost 2,700 hospitals of various sizes and types across all 50 states. In 2010, the Drug Enforcement Administration added the requirement of two-facility authentication for electronic prescribing to the interim final rule for Electronic Prescription for Controlled Substances.”]