Controlling hospital liability : a systems approach