risk mitigation plans in healthcare