A risk management program for insureds of the association must be established as a part of the plan. This program must include but not be limited to: Investigation and analysis of frequency, severity, and causes of adverse or untoward outcomes; development of measures to control these injuries; systematic reporting of incidents; investigation and analysis of patient complaints; and education of association members to improve quality of care and risk reduction.