Risk management and healthcare policy