Best practices for risk mitigation in healthcare