Medically-based Enterprise Risk Management