The rules require physicians performing office surgery to have a risk management program. It does not require them to retain a risk manager. See Rule 64B8-9.009, F.A.C., for more information