MANAGING RISK IN THE HEALTHCARE INDUSTRY: AVOIDING PENALTIES THROUGH PROACTIVE REGULATORY COMPLIANCE