Risk Management Lecture RCOG
Risk Management Lecture RCOG
Definition:
Risk management: A logical and systematic method for identification, analysis
and control of actual and potential risks and their resource implications.
Clinical governance was introduced in 1998 by the Department of Health
with the explicit aim of improving the clinical care and safety of patients.
There are several strands in clinical governance; risk management is one of
the strands, which contributes to quality of care through a reduction in
errors and learning from these errors.
Risk: the probability of harm, from a hazard.
It also takes in to account the severity and extent of the harm. The hazard
can be physical, electrical, or from radiation but above all else clinical.
Risk management has two complementary components.
1. First is (prospective) the risk assessment, which is carried out before any
harm has happened
2. Second happens after the adverse event (retrospective) and is called
adverse clinical event reporting and analysis.
The various elements that should be considered during risk management include:
1. Hazard - something with potential to cause harm
2. Risk likelihood that the hazard is realised
3. Extent of risk the number of people affected
4. Control measures how to reduce the risk.
As stated earlier, when considering risk management one needs to consider what
is a hazard, how do we evaluate risks that might potentially happen from this
hazard, and how can these hazards be eliminated to minimise the risks. As the
hazards and risks can change potentially over time the assessment should also
be reviewed periodically.
Risk calculation:
Risk is measured in terms of likelihood and consequences. Risk is calculated by
multiplying the severity of harm with the likelihood of harm.
Existing level of risk =
Severity (measure of magnitude) X Likelihood (measure of frequency)
The most commonly accepted matrix, which describes severity of harm and the
likelihood of its frequency:
Unexpected
admission
to
6. Birth trauma
Following on from the incident reporting the next step is the analysis, and
identification of all the factors, that contributed to the incident, and then making
recommendations for the future. As said before the process of risk management
is not only to identify the risks but learn from the events to prevent them
happening again.
There are several models available that help with the investigation. Most models
have the following steps:
1. Identification of adverse clinical event and decision to investigate
2. Organisation and data gathering
3. Determination of timeline of ACE
4. Identification of care delivery problems and contributory factors
5. Recommendations and action plan
6. Dissemination of lessons learnt through MDTs, newsletters, direct meetings
and risk management boards.
Further steps:
There are further steps that need to be taken, which include dissemination of the
learning points and escalation of the event nationally for trend analysis later. It is
also important to:
1. Report and record the event on local risk management systems (LRMS)
2. Ensure the event is recorded on STEIS (Strategic Executive Information
System)
3. Make sure the patient and family and relevant organisations are kept
informed
4. Implement the action plan
5. Lastly share the learning and keep the implementation of actions under
review.
Risk treatment and risk register
Risk treatment may include: Risk avoidance (elimination), risk reduction
(optimise, mitigate), risk sharing (outsource or insure) or retention (accept), all
may form the basis of action plan.
Risk register: As a part of the risk management strategy it is the responsibility of
each unit to maintain a register of risk, which maintains a record not only of risks
but also what actions were taken to minimise them. Risks above a set threshold
will need to be escalated to the trust and national risk register.
Summary
In summary, risk management is a tool that helps improve patient safety and
clinical care. Each unit should have a comprehensive strategy for its
implementation and periodic review.
All incidents should be identified and investigated in an open, no blame culture.
When incidents do happen it is usually a systems failure rather than an individual.
Lessons learnt should be disseminated across the team and wider as the case
might prevent a repeat of the incident.