OPM shall demonstrate, by a preponderance of the evidence in the administrative record as a whole, that a provider has committed a sanctionable violation.