Risky business : health-care risk managers are focusing more on the business side of organizations and assuming more responsibility for insurance