Procedure Conducting Risk Assessment
Procedure Conducting Risk Assessment
Is this
policy c
C h e ck urre
the intr nt?
to find ane
the late t
version st
!
1 Introduction ............................................................................. 3
2 Purpose ..................................................................................... 3
3 Scope ........................................................................................ 4
4 Definitions ................................................................................ 4
5 Duties and responsibilities ...................................................... 5
6 Procedures ................................................................................ 6
7 Training Requirements .......................................................... 10
8 Process for monitoring compliance with this Procedure .... 11
9 References .............................................................................. 11
10 Associated documents ........................................................ 12
1 Introduction
Risk assessment is a technique for proactively identifying and addressing risks in all
settings. It is a key tool for effective risk management both in the context of health
and safety management and for management of risks in all other settings across the
Trust (including clinical risks, financial risks, environmental risk etc). The Trust has a
legal duty to undertake risk assessments to protect staff under the Health and Safety
at Work Act; in addition, it is key building block of the Trust’s approach to governance
and risk management.
Whilst recognising that risk can never be eliminated, effective channelling of resources
to identifying and reducing risk is sound business and healthcare practice, and offers
protection to patients’ staff and assets of the Trust. The objective of risk assessment is
to reduce and/or eliminate the consequence of a risk being realised thereby reducing
accidents, harm, loss or disruption to services.
The document contains details of a generic risk assessment recording form which can
be used in many settings.
Advice and support on the use of this procedure can be sought from the Health and
Safety Advisor and the Governance and Risk Lead
2 Purpose
To create and maintain a culture of risk awareness within the Trust, which is
reflected in both business planning and operational management.
To promote a risk aware organisation through risk assessment and proactive risk
management across all services.
To set out training and support available for staff who undertake risk assessments.
The principles contained in this procedure are applicable to the assessment of risk in
all settings across the Trust, and are consistent with the Risk Strategy and Policy
adopted by the Trust.
The risk matrix tool (Appendix A) is relevant to the rating of the extent of a risk in all
settings and has been designed to promote consistency in risk assessment and risk
evaluation to allow the ranking of risks (for example on the risk register), to support
decisions as to resource allocation, to address identified risks.
A risk assessment pro forma (Appendix B) has been designed primarily for use for
health and safety risk assessment across the Trust. However, it can be used in other
risk settings to support a systematic approach to conducting an assessment, or can be
adapted for local use.
Other risk assessment tools (Appendix C and D) are relevant in different settings in the
Trust.
4 Definitions
Consequence The potential consequence (or severity) of the risk being realised
(it is described in terms of levels of harm and/or loss)
Likelihood How often the risk event might happen (e.g. per
procedure/episode or within a specified timeframe).
Risk Rating A measurement of the risk useful for assessing the priority for
control measures for the treatment of different risks. The risk
rating is derived from the ‘risk score’ for consequence x ‘risk score
for likelihood (see Risk Matrix at Appendix 1) *
The Chief Executive has overall responsibility for risk management at the Trust. He has
delegated delivery responsibility within the management structure to:
Managers working throughout the Trust are responsible for ensuring that local risk
management activities including risk assessments are carried out to support Trust-wide
learning from risk issues.
Is responsible for providing expert advice and support on risk management, and for
providing training for all levels of staff on risk assessment, risk management and risk
processes.
The Governance and Risk Adviser provide regular reports to the work streams
reporting to the Clinical Quality Safety and Governance Committee (CQSG) as
required.
All staff have individual responsibility for engaging in risk management activities at
the Trust. Key responsibilities of staff in respect of risk assessment are to:
Bring immediate /hazard issues to the attention of their line manager.
Act safely at all times.
Co-operate with risk assessments and action plans in operation to reduce risk.
Comply with the Trust’s policies, procedures and guidelines that are in place to
protect the health, safety and welfare of anyone affected by the Trust’s activities.
6 Procedures
The Trust follows the risk assessment process described by the National Patient Safety
Agency. The process involves 5 steps as shown below:
Figure 1: Five steps to risk assessment (source: National Patient Safety Agency (NPSA))
Decide who might be harmed or what the impact will be on the organisation (assets,
environment and reputation) and how. Take into account things that have gone
wrong in the past and near-miss incidents. Learn from the past:
The risk assessment may require a multi-disciplinary team to ensure that all areas
of the activity or task to be assessed are considered.
6.2 Decide who might be harmed or the effect on the organisation and how (what can go
wrong? who is exposed to the hazard?)
People will make mistakes. It is necessary to anticipate some degree of human error
and try to prevent the error from resulting in harm.
Consider the number of staff members or patients that might be affected over a
stated period of time. When quoting the number of patients affected you
should always state the length of the assessment period.
6.3 Evaluate the risks (how bad? how often?) and decide on the precautions (is there a
need for further action?)
Consider both the consequence (how bad?) and likelihood (how often?). Is there a
need for additional action? The law requires everyone providing a service to do
everything reasonably practical to protect patients and staff from harm.
Identify the current controls/precautions that are in place to prevent the risk
form causing harm or loss.
Use the Risk Matrix Tool (appendix 1) and guidance in the Risk Assessment pro
forma (appendix 2) to grade the risk.
Decide whether further precautions need to be taken to reduce the risk and if
action is required, determine what changes need to be made.
Re-evaluate the risks assuming the precautions (controls) have been taken (to
check the expected impact of the proposed changes).
The record serves as evidence that the risk has been identified and evaluated and
provides the information necessary to review progress accurately over time to see if
the risk has been reduced.
Risk assessments and action planning should be reviewed and changed when
necessary. This is easy only if the assessment is well recorded and the logic behind the
decisions transparent. Your documentation should show the following:
That a thorough check was made to identify all the hazards and treat all the
significant risks;
The precautions that are in place are appropriate to the risk and remain effective
;
The solutions proposed or being actioned to reduce the risk are realistic,
sustainable and effective.
If the electronic risk assessment form is used then it can be uploaded on to the
electronic data base operated by the Health and Safety Manager. This provides a
storage facility and the ability for other staff to review completed assessments which
can facilitate local planning for risk reduction.
Copies of completed risk assessments can be sent to the Health and Safety manager for
filing; however, it is the responsibility of the local manager to maintain copies
Following the completion of an action plan designed to reduce the risk (to
confirm that risk reduction has been achieved)
6.6.1 Line managers are responsible for ensuring risk assessments are undertaken in their
areas. The Health and Safety Manager will support the line managers and provide
training as appropriate.
6.6.2 The management of risks identified through the risk assessment process will be
determined by the risk rating, (appendix 1) see below:
Risks scored 1-5: are considered low risk and therefore are tolerated by the Trust
Risks scoring 6-8: are considered moderate risks and should be managed /treated
so that they are made as ‘low as reasonably practicable’. These risks will usually be
managed locally unless they are Trust wide when the appropriate corporate
department will lead on management.
Risks scoring 9-12 are considered high risks. These risks must be treated, i.e. an
action plan should be developed and implemented that seek to reduce the
potential impact of the risk (i.e. reduces the risk score). These risks will be added
to the risk register and will be reviewed by the Management Committee and
overseen by the Clinical Quality, Safety, and Governance Committee High risks
scoring 12 will also be reviewed by the Board.
Risks scoring 15-25 are considered as extreme/catastrophic risks. These risks must
be treated, i.e. an action plan should be developed and implemented that seek to
reduce the potential impact of the risk (i.e. reduces the risk score). These risks will
be added to the risk register and will be reviewed by the
Management Committee and the Clinical Quality, Safety, and Governance
Committee High risks scoring 12 will also be reviewed by the Board.
Risk treatment plans have to be developed according to the level of risk and the needs
of the organisation. In broad terms the Trust will seek to tolerate risks (1-5), and treat
risks with a score of 6 or more, and where appropriate will seek to transfer risk to
another provider, or may consider the need to terminate the risk by terminating the
aspect of service affected if no other solution can be identified, and the risk is extreme
(i.e. 15+).
Note: the level of management action is for guidance only. Where management
action is insufficient to reduce the risk rating this should be escalated via the
line management structure.
Escalation level
Risk level Risk score
Extreme
15-25 Board of Directors
Red
High Management committee
9-12
Orange (reporting to Board )
Moderate
6-8 Directorate/Team
Yellow
Low
Team but monitored at
Green 1-5
Directorate level
(tolerated risks)
6.6.3 All risks assessments must be reviewed when a major change occurs that could have an
impact on a risk.
6.6.4 Directors are responsible for adding significant risk s to the trust risk register.
6.6.5 The Clinical Quality Safety and Governance Committee (CQSG) oversees the risk
register, supporting Directors in the assessment and management of their risks.
6.6.6 The Board of Directors will receive the risk register (for risks 9+) for information and
review on a quarterly basis the risks graded 12+ (both strategic and operational) on a
two monthly basis.
7 Training Requirements
The Trust has conducted a training needs analysis and will make the following
provisions for training
All staff joining the Trust will be briefed on the principles of risk management including
risk assessments as part of the Trust’s induction programme.
Specific risk assessment sessions will be held for Directors and Managers, either in
groups or as one to one training delivered by Risk experts in the Trust and/or external
trainers as appropriate. The 2 yearly mandatory INSET sessions for all staff will include
promotion of risk assessment techniques and this procedure.
Locally, line managers are responsible for reviewing their risk assessments at regular
intervals. The schedule for the review of the risks assessments will be determined by
the residual risk rating and/or the timescales indicated in the action plan.
The work streams reporting to CQSG will consider risks relating to their areas of
responsibility and will ensure that appropriate action plans are implemented and
monitored, escalating any risks that are not effectively addressed to the Management
Team and CQSG and via monitoring of the risk register.
The CQSG will review the risk related assurance and any risks escalated for
consideration and advice on the robustness of action plans to reduce risk.
9 References
Health and Safety in Health and Social Care Services (HSE website)
http://www.hse.gov.uk/healthservices/index.htm
Appendix A
RISK SCORE MATRIX DEFINITIONS
(2) Minor:
financial loss (up to 5K),service interruption ,environmental/estate impact, impact on
reputation, impact on quality
(3) Moderate :
financial loss (5K – 200K), service interruption for more than one week, environmental/estate
impact, Impact on reputation. Local press, stakeholders express concern, impact on quality
moderate loss of information (recoverable) ,moderate risk of low value claim
Failure to meet strategic objective threatens independent functioning or stability of the Trust.
Extreme/ Death, Financial loss3M+, Certain risk to reputation, national press3+ days, of C questions
Catastrophic Serious/long term and/or permanent loss of information that impacts directly on service
delivery, Quality- External controls exerted , Threat of Judicial review, expected litigation
valued at 1M+,High profile breach of confidential information (eg patient identity)
(5)
Buildings/property condemned leading to major loss of service
1
For the current version of Trust procedures, please refer to the intranet.
Very unlikely to
1 Will only occur in exceptional circumstances.
occur
Almost certain to
5 The event is expected to occur in most circumstances.
occur
Likely to occur 4 4 8 12 16 20
Likelihood
Could occur 3 3 6 9 12 15
Unlikely to occur 2 2 4 6 8 10
1 2 3 4 5
Catastrophic
Risk Matrix Negligible Minor Moderate Major
/ Fatal
Consequence
Escalation level
Risk level Risk score
Extreme Board of Directors
15- 25
Red
High Management committee
9-12
Orange (reporting to Board )
Moderate Directorate/Department
6-8
Yellow
Low Department
Green 1-5 but monitored at
(tolerated risks) Directorate level
Closing risks: When the risk has been treated, transferred or terminated and is no longer
considered to be a risk to the Trust the risk is ‘closed’.
Tolerated risks remain on the risk register and should be reviewed periodically at Committee
level and escalated as appropriate
Section / Task:
What if question Causes Consequences Safeguards Current Risk Recommendations Future Risk*
/Additional
C L R safeguards C L R
* This is the anticipated risk level after the recommendations/actions have been applied.
Appendix C
ESTATES AND FACILITIES ENVIRONMENT RISK ASSESSMENT
SITE: ASSESSOR:
Stage 3 Add all risks 6+ to trust operational risk register (estates and facilities page)
Stage 4 Review this risk assessment at least annually and at other times if there are changes in
circumstances that could impact on the risk
ENVIRONMENTAL RISK ASSESSMENT TEMPLATE
Conseque
Likelihoo
this Rating:
nce
(Has the potential to cause harm, apply? (examples listed add details of specific arrangements that apply to
d
damage or loss) * site/location being assessed) (C x L)
Slip, trip or fall of person on the same Access routes kept clear, surfaces maintained in good repair, use of
level – Risk of personal injury appropriate warning signs.
Manual handling of inanimate objects Health and Safety Policy, training for staff required to lift in course of
– Risk of personal injury/ill health, their employment
non-compliance with H&S Legislation
Conseque
Likelihoo
this Rating:
nce
(Has the potential to cause harm, apply? (examples listed add details of specific arrangements that apply to
d
damage or loss) * site/location being assessed) (C x L)
Exposure to needles or risk of biting Infection Control Policy, access to expert advice via RFH, sharps boxes
injury due to work undertaken available on request
personal injury/ill health
Exposure to waste materials - Risk of Waste Management Policy, training, appropriate storage facilities and
personal injury/ill health provision and use of PPE.
Consider: Asbestos ; Food waste;
Other hazardous waste if relevant
Note: An action plan must be completed for all risks scoring 9+ above, and may be completed for risks
scoring 6-8 if actions to reduce risk have been identified via assessment process. All risks scoring 6+ must be
added to the Trusts corporate risk register and the Corporate Governance Facilities Working Group will
monitor compliance with the action plan
Stage 3: The risk assessment record must be REVIEWED every 12 months as a minimum to ensure that the
hazards are still current and the control measures remain effective. They should also be
reviewed upon any significant changes to the working environment or working practice and
following any serious accident or incident. The Risk Assessment Record should be held locally for
information purposes. All significant risk issues must be communicated to the appropriate
Director/Senior Manager for monitoring purposes and inclusion on the risk register. All staff
that may be ‘at risk’ must be informed of the significant hazards and any control measures they
may need to implement as part of their work activity e.g. the wearing of PPE etc.
4. Does this policy, function or service development affect patients, staff and/or the
public?
Response: Yes
This is a procedural v document that sets out systems and processes to be applied when
risk assessing. It has no direct impact on equalities issues.
5. Is there reason to believe that the policy, function or service development could have
an adverse impact on a particular group or groups?
Response : NO
7. Based on the initial screening process, now rate the level of impact on equality groups
of the policy, function or service development:
Low…….
(i.e. minimal risk of having, or does not have negative impact on equality)
Positive impact: