medical practices should be aware of risks identified in the past and then establish policies and procedures for what? a. continual auditing b. continual training c. continual monitoring d. continual reporting