When risks must be accepted, what must also be in place according to best practices?

The appropriate answer highlights the importance of implementing contingency and monitoring plans when risks must be accepted. Best practices in risk management dictate that even when a risk is acknowledged and accepted, it is crucial to have strategies in place that outline how to manage potential outcomes.

Contingency plans are created to ensure that there are predefined responses to manage the impact of risks if they materialize. This allows an organization to remain prepared and minimize negative effects on operations or patient care. Furthermore, monitoring plans are essential for ongoing assessment of the risk environment, enabling organizations to detect changes in risk status and respond proactively, rather than reactively.

These plans facilitate a structured approach to risk management, ensuring that organizations can track and handle risks effectively, thereby maintaining operational integrity and safeguarding health information. By having these plans in place, organizations can demonstrate their commitment to risk management and ensure that they are not left vulnerable if an accepted risk leads to an adverse event.