Improving hospital supply chains by managing risk flows