How risk management programs operate within healthcare