what is the purpose of risk management in healthcare