Theory and pratice of in-hospital patient risk management