Hospitals, Inc. owns 105 hospitals in the U.S. and 15 hospitals abroad, including acute care hospitals, addiction/substance abuse treatment hospitals, psychiatric hospitals, and teaching hospitals.Since its inception, the company has let each hospital adopt its own risk management and compliance policies and procedures.However, as it has continued to grow, the company is having second thoughts about this decentralized approach.

You have just been hired as Hospitals, Inc.'s Chief Risk Officer and Head of Compliance, after spending 25 years in risk management and compliance at several large financial institutions.

You have been tasked with revamping Hospitals, Inc. risk management/compliance policies and procedures.

What are two recommendations that you would make to 'Hospitals, Inc.' board of directors?