http://www.mrpalsmy.com/jci-standard-mci-20-1-me-1-part-1-risk-management-in-the-organization-has-a-process-to-aggregate-data-in-response-to-identified-user-needs/