The facility shall have a risk-management program. A risk management program includes, but is not limited to, a system for identifying, evaluating, and minimizing risk exposures and a qualified person, defined in governing body bylaws, assigned to coordinate and/or perform indicated functions. The program shall include both clinical and non-clinical, including safety, functions. The governing body shall provide support for the program and receive periodic reports.
Okla. Admin. Code § 310:667-7-9