and risk assessment has been established where a comprehensive risk assessment is conducted for each of the routine and non-routine activities and services at each site to identify, monitor, measure and manage the identified risks in a structured manner and to minimize or control their impacts, and achieve continual improvement.