Which of the following is LEAST likely to be a core component of a comprehensive healthcare risk management program?