Top Banner
Risk Management Policy This policy sets out how the Risk Management Strategy will be implemented and should be read in conjunction with the Risk Management Strategy, Health and Safety Policy, Accident/Incident Reporting Policy and Fire Safety Policy. Document Number: EDQ012 Version: Version 6 Authorised by: Trust Board Date authorised: July 2010 Next review date: July 2013 Expiry Date: 30 June 2013 Document Author: Helen Curtis – Governance Director
22

Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Jul 23, 2018

Download

Documents

lylien
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Risk Management Policy

This policy sets out how the Risk Management Strategy will be implemented and should be read in conjunction with the Risk Management Strategy, Health and Safety

Policy, Accident/Incident Reporting Policy and Fire Safety Policy.

Document Number: EDQ012 Version: Version 6 Authorised by: Trust Board Date authorised: July 2010 Next review date: July 2013 Expiry Date: 30 June 2013 Document Author: Helen Curtis – Governance Director

Page 2: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 2 of 22

Pennine Acute Hospitals NHS Trust

Risk Management Policy

Main Revisions from previous issue Name of Previous Document:

Risk Management Policy

Document Number: EDQ012

Version Number: Version 5

Reason for Revision:

Has undergone scheduled review; has been amended to reflect the work undertaken in conjunction with Ernst Young in preparation for Foundation Trust status; and has been amended to reflect changes to the board committee structure.

Page 3: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 3 of 22

Contents Page(s) 1. Introduction 4 2. Accountability/Responsibility 4-6 3. Risk Assessment 6-7 4. Risk Rating 7 5. Risk Control/Principles of Prevention 7 6. Risk Register 8 7. Risk Register Process 8-9 8. Training & Education 9 9. Accident/Incident Reporting 10 10. Performance Monitoring and Management 10 11. Provision of Information 11 12. References 11 13. Appendices 12-22 Appendix A – Risk Assessment Form 13-17 Appendix B – Schematic Representation 18 Appendix C – Criteria For Escalation 19 Appendix D – Trust Contact Numbers 20-21 Appendix E – Monitoring Compliance 22

Page 4: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 4 of 22

1.0 Introduction 1.1 The Pennine Acute Hospitals NHS Trust is committed to the provision of high

quality services in environments that are safe for patients, staff and visitors alike. It acknowledges the importance of the identification, reduction and proactive management of all areas of risk to protect the Trusts services, staff, finances and reputation.

1.2 This policy sets out how the Risk Management Strategy (EDQ011) will be

implemented and should be read in conjunction with the Risk Management Strategy, Health and Safety Policy (EDQ007), Accident/Incident Reporting Policy (EDQ008) and Fire Safety Policy (EDG012).

1.3 This policy will be reviewed every three years or when procedural, legislative

or best practice changes occur. 1.4 The aim of the Trust is to minimise its exposure to clinical, financial and

operational risk; the methodology for this is in accordance with sound risk management practices.

2.0 Accountability/ Responsibility 2.1 The Chief Executive has overall responsibility for the management of risk. 2.2 The Trust board will establish a number of committees, which will be chaired

at Executive level and will report to the Trust Board.

• Clinical Risk is the responsibility of the Medical Director via the Clinical Governance and Quality Committee. Clinical Risk Management will be facilitated by the Trust’s Risk Co-ordinators.

• Financial Risk is the responsibility of the Director of Finance through the

Finance Committee.

• Operational Risk is the responsibility of the Operations Director through the Risk Management Committee.

• Physical Risk is the responsibility of the Trust Safety Advisors. The Trust

Safety Advisors will facilitate risk management issues relating to physical risk ensuring compliance with all health and safety regulations.

• Handling Risk - the Trust Manual Handling/Back Care Advisors will

facilitate risk management issues relating to Moving and Handling Risk.

• Fire Risk - the Trust Fire Officers will facilitate risk management issues relating to Fire Risk.

Page 5: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 5 of 22

2.3 Trust Board/Chief Executive/Medical Director To support and direct the Risk Management Strategy by:

• Demonstrating commitment to the Risk Management Strategy/Policy

2.4 Governance Director

• Regularly review progress in line with Risk Management Strategy/Policy

• Provide resources and guidance. 2.5 Risk Co-ordinators/ Health and Safety Advisors

• Report to the Divisional Governance Committees and Health and Safety Committees

• Monitor and investigate incident reports

• Assess organisational systems, policies and procedures, as required

• Communicate/liaise with appropriate personnel

• Assist Divisional, Directorate and Departmental Managers to instigate appropriate risk controls

• Maintain and update the Risk Register 2.6 Divisional Directors, Clinical Directors and Heads of Department

• Ensure risk assessments take place within their sphere of responsibility

• Divisional Directors are authorised to own and action all risks with a residual risk rating of moderate or below. Risks with a residual risk rating of high and above should be brought to the attention of the appropriate Executive Director.

• Ensure risk assessments are forwarded to the Health and safety Advisors/Risk Co-ordinators

• Ensure incident reports are completed for all incidents and near misses

• Review risk assessments and incident forms in order to implement action to eliminate/decrease the risk

• Seek advice from Health and Safety/Clinical Risk Co-ordinators and other relevant officers as required

• Instigate appropriate risk controls

• Ensure that all staff understand their responsibilities for risk management under legislation, risk management policies and procedures

• Ensure all staff comply with statutory regulations e.g. Manual Handling and RIDDOR

• Ensure staff compliance with Trust policies, protocols and procedures.

• Ensure attendance of staff at required training e.g. risk management training and Induction, and keep records of such training

2.7 Head of Claims/Claims Managers

Page 6: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 6 of 22

• Notify the NHS Litigation Authority of any reportable incident/complaints (potential claims), and claims

• Liaise with the legal advisors appointed by the NHS Litigation Authority

• Notify the Chief Executive, Director of Nursing, Medical Director and Governance Director of any claim considered to be novel, contentious or repercussive.

• Provide regular trend reports to the appropriate divisions, trust board and Governance Committees

• Communicate/liaise with Risk Co-ordinators, Health and Safety Advisors and Complaints Staff

2.8 Complaints Management

• Record and report all complaints in accordance with the NHS complaints procedure and Trust Complaints Policy

• Provide regular trend reports to the appropriate divisions, Trust Board and Governance Committees

• Communicate/liaise with Risk Co-ordinators, Health and Safety Advisors, Complaints Staff or other relevant officers.

3.0 Risk Assessment 3.1 The principal means by which risks that the Trust is exposed to can be

properly controlled is via a proactive programme of assessment, using the format provided (see appendix A). Many such assessments will be carried out at local level, by ward or departmental managers. However risks affecting the divisions as a whole will need to be assessed at divisional level.

3.2 Assessments and measures taken by managers to ensure compliance should

be made available to all relevant staff. 3.3 Upon completion of any risk assessment the documentation should be

forwarded to the line manager or the designated site officer (see appendix B). 3.4 In performing a suitable and sufficient risk assessment, the following

definitions should be borne in mind:

Hazard anything with the potential to cause harm Risk the likelihood of that harm being realized

3.5 All assessments should follow the five stages identified below (Health and

Safety Executive’s ‘Five Steps to Risk Assessment’): • identify the hazards

• decide who may be harmed and how

Page 7: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 7 of 22

• evaluate the risks and decide whether existing precautions are adequate or more should be done

• record the findings

• review and revise as necessary. 3.6 Training in risk assessment will be available to all staff engaged in the

process and given by the Health and Safety Advisors/Risk Co-ordinators. Advice upon specific topic areas is available from those mentioned in Appendix B of this document.

4.0 Risk Rating 4.1 All risks identified via the assessment process must be given a rating

according to the matrix given below. Most likely consequence Likelihood of occurrence

Insignificant Minor Moderate Major Catastrophic

Almost certain

Significant Significant High High High

Likely Moderate Significant Significant High High Possible Low Moderate Significant High High Unlikely Low Low Moderate Significant High Rare Low Low Moderate Significant Significant 5.0 Risk Control/Principles of Prevention 5.1 Once assessments have been carried out, clear priorities for action need to

be established. Risks attracting a rating of ‘significant’ or ‘high’ must be reported to both the Divisional Director and the site Director to ensure they are kept informed. Action plans must be drawn up for significant or high level risks to ensure they are reduced to the lowest practicable level. Aside from action plans, control measures must be established for all risks where these are identified as necessary and must be brought to the attention of all staff affected by them (including contractors’ staff where these are used). Monitoring must be carried out at local level to ensure control measures are being implemented as required. Examples of controls could be: training, policies, procedures, protective equipment, alarms, contingency plans, checklists etc.

5.2 All risk assessments should be reviewed on a regular basis and at least

annually in any case. The higher the risk rating, the more regular the review period; assessments must also be reviewed following introduction of new technology or changes to working practices.

Page 8: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 8 of 22

6.0 Risk Register 6.1 From the risks identified via the assessment process, a risk register will be

compiled, establishing priorities for those risks affecting the whole or a significant part of the organisation. The register will include both clinical and non-clinical risks and form the basis for discussion as to allocation of resources. The register will be discussed at the Risk Management Committee, the Divisional Governance Committees and by the Executive Directors.

6.2 Risks may also be identified through group review, individual management

concerns, following a significant incident, performance data or legislation 7 The Risk Register Process 7.1 The Risk Register will work at three main levels:

• Corporate (ie Board level) • Executive Director/Division • Directorate

A schematic representation of the process is attached at Appendix B. The content of these registers may originate from two directions as a ‘top down/bottom up’ approach is in place. Risks descend from the top by means of objectives and directives to the organisational level of management below. Risks ascend the levels by a system of exception reporting. The owner of the risk register is the person with ultimate responsibility for a defined area of responsibility, however they may elect a custodian of the register who will update it and provide relevant reports.

7.2 Corporate

The owner of the Board Risk Register is the Chief Executive who will in associate with the Executive Directors and the Board ensure that strategic risks that would influence the ‘business’ aspects of managing the organisation are recognised and addressed. These risks may derive from: • Recognition of threats to the corporate objectives • Risks to the organisation’s key investment and change projects • Key risks arising from the need to comply with external standards • Significant risks escalated from Divisions or Executive Directors • Key risks from topic specific assessments

The risks identified would not only be significant in nature but failure to address these may result in serious consequences for the organisation. The Board will review quarterly a report on corporate risks, collated from key internal risk registers, and shared with Risk Management Committee at

Page 9: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 9 of 22

agreed intervals. 7.3 Executive Directors/Divisions

The Executive Directors and Divisional Directors will maintain risk registers containing the operational risks for their areas. The Risk Register should be a regular agenda item on the relevant management team meeting for discussion and review. Divisional Directors can escalate risks to the appropriate Executive Director using the criteria for escalation at Appendix C.

Risks which do not automatically fall within the remit of one of the Executive Directors or Divisions will, by agreement, be allocated to an Executive Director or Divisional Director to ‘host’ on their risk register. Review of these registers through the line management and performance management system allows discussion and planning around risks that originate in one Division/Directorate which have the potential to cause risks in other Divisions/Directorates.

7.4 Directorate

The Clinical Director will maintain a risk register containing the operational risks for their area. The Directorate Risk Register should be a regular agenda item on the Directorate Management Team meetings for discussion and review. All risk should be managed at Directorate level unless they fall into the criteria for escalation to the Divisional Register.

8.0 Training and Education 8.1 Risk management training will take place across the Trust and will fall into

these categories to cover all employees and contracted staff: • Induction - reference to the Trust arrangements for handling risk,

essential for all staff. A local induction should be provided for all staff at ward or departmental level.

• Awareness - general appreciation by all staff of the importance of managing risk and the Trusts strategy for dealing with it.

• Risk identification and risk reduction programme - techniques for undertaking risk assessment, education and training in incident reporting systems, manual handling training, and all mandatory training requirements.

• Training and Education - will be carried out in conjunction with the Trust Risk Co-ordinators, Trust Safety Advisors, Trust Manual Handling Co-ordinators, Trust Fire Officers, Trust Training Department and external agencies.

8.2 The programme will be designed to meet the business plans, local and

national recommendations and service needs.

Page 10: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 10 of 22

9.0 Accident/Incident Reporting 9.1 The Trust will have a system in place to ensure that all accidents, incidents or

near misses are reported and recorded at the earliest opportunity and support a positive, non-punitive culture to ensure robust reporting.

9.2 Whilst this is a reactive mechanism for identifying risk, the Trust will

investigate accidents/incidents to establish underlying causes and learn any lessons emerging from such investigations. Information from the accident/incident reporting process will feed into the risk identification process to ensure that all risks are identified and enable the Trust to respond accordingly.

9.3 The Trust will work with the NPSA to ensure all Patient Safety Incidents are

reported to the National Reporting & Learning System (NRLS. In addition individual incidents will be reported under the STEIS guidance to the Strategic Health Authority and defective equipment to the MHRA. All instances to be reported via the Governance Directorate. In other instances it may be necessary to contact the Police, the coroner, the NRLS or other organisations. The decision to do so should be made in conjunction with the Medical Director or Chief Executive.

9.4 The Trust will also comply with the Reporting of Injuries, Diseases and

Dangerous Occurrences Regulations 1995 (RIDDOR). This requires employers to report certain specified notifiable incidents to the Health and Safety Executive. These include major injuries, specified diseases and specified dangerous occurrences as well as all accidents resulting in absence from work or inability to perform normal duties for more than three days. Details of RIDDOR specified incidents will be available within each Ward or Department to ensure accurate reporting. All RIDDOR reports will be made by the Health and Safety Advisor.

10.0 Performance Monitoring and Management 10.1 The Trust will actively participate in external assessments and accreditation in

order not only to demonstrate compliance with standards but as a way of monitoring its performance and progress with the management of risk. These will include:

• Care Quality Commission Registration • Risk Management Standards • Patient Environmental Assessment Teams (PEAT) Standards • Medicines & Healthcare Products Regulatory Agency (MHRA) • National Patient Safety Agency (NPSA) • External Audit

10.2 Internally, performance management will take place through the line

management structure as outlined in the schematic diagram attached at

Page 11: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 11 of 22

Appendix B. The Board Risk Register will be reviewed quarterly at the Executive Management Team prior to being submitted to the Trust Board. Individual Executive Director Risk Registers will be reviewed quarterly by the Executive Management Team. Divisional Risk Registers will be reviewed six monthly as part of the performance review process with the Executive Management Team. Directorate Risk Registers will be reviewed by Divisional Management Teams.

10.3 The application of this policy will be monitored by audit against the minimum

requirements of the current NHSLA Risk Management Standards for Acute Trusts, Primary Care Trusts and Independent Sector Providers of NHS Care, Criterion 1.1 ‘Risk Management Strategy’. A monitoring table is attached at Appendix E.

11.0 Provision of Information 11.1 In order to ensure success and ownership of this policy, information must be

disseminated to all employees. Copies of policies, procedures and risk assessments should be kept within all wards and departments and drawn to the attention of all staff. Policies and procedures will also be available on the Trust intranet.

11.2 Assessments carried out under the Control of Substances Hazardous to

Health Regulations (COSHH) should be carried out using the safety data sheet for the substance in question. Copies of all data sheets should be kept in a file within the Ward or Department alongside the assessments themselves. As with general risk assessments, these should be brought to the attention of all staff prior to their using the substance in question. Training in correct use must be given if required.

11.3 Notices from the Medicines & Healthcare Products Regulatory Agency

(MHRA) will be distributed throughout the Trust to staff affected by them. The Trust will have a proactive procedure in place to ensure prompt distribution of all MHRA notices and for feedback from managers to confirm necessary action has been taken.

12.0 References

• NHS Executive EL (93) 111 Risk Management in the NHS • HSC Management of Health and Safety in the NHS • Trust Risk Management Strategy • Management of Health and Safety at Work Regulations 1999 • NHSLA Risk Management Standards for Acute Trusts, Primary Care Trusts and

Independent Sector Providers of NHS Care

Page 12: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 12 of 22

13.0 Appendices 13.1 The following appendices have been attached overleaf to support this

document: Appendix A – Risk Assessment Form Appendix B – Schematic Representation Appendix C – Criteria for Escalation Appendix D – Trust Contacts Appendix E – Monitoring Compliance

Page 13: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 13 of 22

Appendix A – Risk Assessment Form

THE PENNINE ACUTE HOSPITALS NHS TRUST

RISK ASSESSMENT FORM

DIVISION/DEPARTMENT: DATE: REVIEW DATE: RISK: LIKELIHOOD: CONSEQUENCE: RISK RATING: CONTROLS IN PLACE: CONTROL EFFECTIVENESS: RESIDUAL RISK RATING: ACTIONS: If the residual risk is HIGH or SIGNIFICANT the action plan overleaf must be completed. The action plan should include interim actions already taken or proposed to reduce the risk; whilst working towards implementation and/or funding of the ultimate action plan to remove the risk or reduce it to an acceptable level. SIGNED: …………………………………………………… NAME: ……………………………………………………… DESIGNATION: ……………………………………………

Page 14: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: July 2013 Please ensure you have the latest version of this document 14 of 22

RISK REMOVAL/REDUCTION ACTION PLAN

Action

No.

Description of Action *

Priority*

*

Responsibility***

Cost****

Due Date

Date

Completed

* Description of actions should include interim actions already taken as well as those planned that will reduce the risk prior to the final action identified. ** Priority should be HIGH, MEDIUM or LOW. *** Responsibility is the individual, group or management team responsible for the action. **** Cost should be the estimated total cost of implementing the identified action Dates should be realistic and achievable; where interim actions have already been taken then the date they were implemented should also be included in the ‘Date Completed’ column.

Page 15: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy Version 6

The Pennine Acute Hospitals NHS Trust

Guidance on the Completion of Risk Assessment Forms

Identified Risk This column should describe the identified risk. The risk may affect the Trust, Hospital, Directorate, Department or Individuals (singularly or in groups). It may also relate to health and safety, the provision and/or quality of service or care, the finances of the Trust or it’s reputation. The Trust is a very diverse and complex organisation with a wide range of risks; the most significant and threatening risks should be addressed first. Likelihood Likelihood refers to how the Trust/Hospital/Directorate/Department/Individual may be exposed to the identified risk. The options are: - Likelihood Description

Almost certain Likely to reoccur on many occasions, a persistent issue Likely Will probably reoccur but is not a persistent issue Possible May reoccur occasionally Unlikely Do not expect it to happen again but it is possible Rare Can’t believe that this will happen again

Consequence Consequence refers to the effect if the identified risk occurs. The options are: -

Catastrophic

Major Moderate

Minor Insignificant

The following table gives examples of these consequences in relation to Personal Injury, Organisational Impact, Financial Loss and Increased Waiting Lists.

Page 16: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy Version 6

Impact Definitions Description Negligible Minor Moderate Major Extreme Patient Experience

Reduced quality of Patient experience/ Clinical outcome not directly related to delivery of clinical care

Unsatisfactory patient experience. Clinical outcome directly related to care provision – readily resolvable

Unsatisfactory patient experience/clinical outcome; short term effects – expect recovery <1wk.

Unsatisfactory patient experience/clinical outcome; long term effects – expect recovery >1wk.

Unsatisfactory patient experience/clinical outcome; continued ongoing long term effects

Objectives/ Project

Barely noticeable reduction in scope quality or schedule

Minor reduction in scope, quality or schedule

Reduction in scope or quality of project; project objectives or schedule

Significant project over-run Inability to meet project objectives; reputation of the organisation seriously damaged

Injury: physical and psychological

Adverse event leading to minor injury not requiring first aid

Minor injury or illness, first aid treatment required

Agency reportable, eg Police (violent and aggressive acts). Significant injury requiring medical treatment and/or counselling

Major injuries/long term incapacity or disability (loss of limb) requiring medical treatment and/or counselling

Incident leading to death or major permanent incapacity

Complaints/ Claims

Locally resolved verbal complaint

Justified written complaint peripheral to clinical care

Below excess claim Justified complaint involving lack of appropriate care

Claim above excess level Multiple justified complaints

Multiple claims or single major claim Complex justified complaint

Service/ Business Interruption

Interruption in a service which does not impact on the delivery of patient care or the ability to continue to provide service

Short term disruption to service with minor impact on patient care

Some disruption in service with unacceptable impact on patient care Temporary loss of ability to provide service

Sustained loss of service which has serious impact on delivery of patient care resulting in major contingency plans being invoked

Permanent loss of core service or facility Disruption to facility leading to significant ‘knock on’ effect

Staffing and Competence

Short term low staffing level temporarily reduces service quality (< 1 day) Short term low staffing level (>1day), where there is not disruption to patient care

Ongoing low staffing level reduces service quality. Minor error due to ineffective training/implementation of training

Late delivery of key objective/service due to lack of staff. Moderate error due to ineffective training/implementation of training. Ongoing problems with staffing levels

Uncertain delivery of key objective/service due to lack of staff. Major error due to ineffective training/implementation of training

Non delivery of key objective/service due to lack of staff Loss of key staff Critical error due to ineffective training/ implementation of training

Financial; including damage/loss/ fraud

Negligible organisation/ personal financial loss (£<1K). (NB Please adjust for context)

Minor organisation/ personal financial loss (£1010K)

Significant organisational/personal financial loss (£10-100K)

Major organisational/ personal financial loss (100K-1m)

Severe organisation/ personal financial loss (£>1m)

Inspection/ Audit Small number of recommendations which focus on minor quality improvement issues

Recommendations made which can be addressed by low level of management action

Challenging recommendations that can be addressed with appropriate action plan

Enforced action Low rating Critical report

Prosecution Zero rating Severely critical report

Adverse Publicity/ Reputation

Rumours, no media coverage Little effect on staff morale

Low media coverage – short term. Some public embarrassment. Minor effect on staff morale/public attitudes

Local media – long term adverse publicity. Significant effect on staff morale and public perception of the organisation

National media/adverse publicity, less than 3 days. Public confidence in the organisation undermined. Use of services affected

National/international medial/adverse publicity, more than 3 days MSP/MP concern (Questions in Parliament) Court Enforcement Public Inquiry/FAI

Page 17: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy Version 6

Risk Rating The inherent risk rating is obtained by using the comparison of likelihood and consequence in the table below. The rating will be High, Significant, Moderate or Low. Consequences Insignificant Minor Moderate Major Catastrophic Likelihood Almost Certain Significant Significant High High High Likely Moderate Significant Significant High High Possible Low Moderate Significant High High Unlikely Low Low Moderate Significant High Rare Low Low Moderate Significant Significant Controls in Place This column should identify and describe the control measures currently in place in relation to the identified risk. Control Effectiveness In this column a judgement must be made on the effectiveness of the control measures in place. They should be judged on their effectiveness at controlling the identified risk. The ratings are Satisfactory, Some Weaknesses and Weak. Satisfactory: Controls are strong, operating properly and provide a reasonable level

of assurance that the risk is adequately controlled. Some Weaknesses: Some control weaknesses/inefficiencies have been identified.

Although not considered to present a serious risk, improvements are required to provide reasonable assurance that the desired level of quality is attained.

Weak: Controls do not meet an acceptable standard and do not provide

assurance that the identified risk is adequately controlled. Residual Risk Rating This column identifies the residual risk after taking into account the existing control measures. The options are High, Significant, Moderate or Low and are calculated using the table below which compares Risk Rating and Control Effectiveness.

Control Effectiveness

Risk Rating Low Moderate Significant High

Weak Moderate Significant High High Some Weaknesses Low Moderate Significant High Satisfactory Low Low Moderate Significant Action Required/Comments This column should identify necessary action required to remove or reduce to an acceptable level the identified risk, if not already adequately controlled. The column should always be completed when the residual risk is identified as high or significant.

Page 18: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy Version 6

Page 19: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy Version 6

Appendix C Criteria for Escalation Issues to consider if planning escalating a risk – 1 The issue is currently on the appropriate Risk Register

Yes/No

2 The issue has been scored and has been assessed as a very high risk

Yes/No

3 All possible controls have been implemented

Yes/No

4 Other sources of funding available have been considered

Yes/No

5 The Management Team believes there is no provision in the current budget to address this risk

Yes/No

6 The Management Team believes this risk needs to be addressed and are able to demonstrate the reduction of risk from any additional finance made available

Yes/No

• If No to any question the risk requires to be explored further at the current management level to ensure it is a true exception

• If all Yes, pass to more senior management level • It is preferable that several options of risk reduction should be presented

to the more senior level providing a range of choice Issues to be considered when receiving escalated risks – Criteria to be used to assess the risk 1 Is there agreement on the scoring of the risk? (Likelihood x Severity)

Yes/No

2 What evidence does the submitting manager have to justify the Likelihood score of the risk? (Audit, incident report, claim, complaints, Inspection, external review)

Evidence Available

No Evidence Available

3 Is there agreement that the Directorate/Division does not have Funding within the budget for this issue?

Yes/No

4 Have other controls and solutions been implemented in other Services which could be applied as an alternative to additional Funding?

Yes/No

5 Are there any knock-on effects/impact on any of the other areas?

6 Are there other alternative controls that could be implemented?

7 Is further information required before making a decision? After due consideration of actions to be taken, feedback must be provided to the

Service/Directorate/Division who escalated the risk

Page 20: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: June 2010 Please ensure you have the latest version of this document 20 of 22

Appendix D - Trust Contact Numbers

TRUST CONTACT NUMBERS

Fairfield Site

NAME ROLE NUMBERS Diane Panter Risk Co-ordinator 0161 778 3824 Kevin Kennerdale Health & Safety Advisor 0161 778 3463 Deborah Pullen Head of Claims 0161 778 2010 David Smith Fire Advisor 0161 778 3990 Sylvia Maxfield Infection Control Nurse 0161 778 2428 Clare Shepherd Clinical Audit Co-ordinator 0161 720 2586 Julia Grant PALS Officer 0161 778 2455 Susan Hill PALS Officer 0161 778 2455 Dr R Burman Consultant Microbiologist 0161 778 2429 Lisa Bowe Moving & Handling Co-ordinator 0161 778 3248 Beverley Sedman Blood Transfusion Practitioner 0161 778 3825

Rochdale Site

NAME ROLE NUMBERS Marjorie Gabbott Risk Co-ordinator 01706 757294 Kevin Kennerdale Health and Safety Advisor 01706 757292 Deborah Pullen Head of Claims 0161 778 2010 David Smith Fire Advisor 0161 778 3990 Ann Taylor Infection Control Nurse 01706 754689 Shirley Naylor Clinical Audit Co-ordinator 01706 754257 Angela Greenwood PALS Officer 01706 757354 Dr I Cartmill Consultant Microbiologist 0161 627 8056 Patricia Barbagiannis Moving & Handling Co-ordinator 01706 517588 Beverley Sedman Blood Transfusion Practitioner 0161 778 3825

North Manchester Site

NAME ROLE NUMBERS Arlene Ryan Risk Co-ordinator 0161 720 2683 Jane Sutcliffe Health and Safety Advisor 0161 720 2531 Deborah Pullen Head of Claims 0161 778 2010 Eric Rosenberg Fire Advisor 0161 720 2885 Mike Beesley Roz Kaufman

Infection Control Nurses 0161 720 2935 Bleep 4235

Claire Shepherd Clinical Audit Co-ordinator 0161 720 2586 Julia Grant PALS Officer 0161 922 3533 Susan Hill PALS Officer 0161 922 3533 Dr Hari Panigrahi Consultant Microbiologist 0161 627 1644 Richard Olver o Moving & Handling Co-ordinator 0161 720 3425 Wendy Clapham Blood Transfusion Practitioner 0161 720 2797

Page 21: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy: EDQ012 Version 6

Review Date: June 2010 Please ensure you have the latest version of this document 21 of 22

Oldham Site

NAME ROLE NUMBERS Diane Grubb Risk Co-ordinator 0161 627 8806 Stephanie Mills Health and Safety Advisor 0161 627 8804 Deborah Pullen Head of Claims 0161 778 2010 Graham Brooks Fire Advisor 0161 627 5550 Claire Chadwick Infection Prevention Consultant 0161 778 5224 Lorraine Durham Infection Control Nurse 0161 627 8771 Elizabeth Wilson Infection Control Nurse 0161 627 8771 Shirley Naylor Clinical Audit Co-ordinator 0161 627 8354 Angela Greenwood PALS Officer 0161 627 8678 Dr I Cartmill Consultant Microbiologist 0161 627 8056 Val Green Moving & Handling Co-ordinator 0161 627 5353 Susan Andrews Blood Transfusion Practitioner 0161 627 8790 Complaints based at North Manchester General Hospital

NAME ROLE NUMBERS Sonia Appleton Head of Complaints/PALS 0161 918 4296 Gillian Armstrong Complaints Manager 0161 604 5881 Amanda Barnes Complaints Manager 0161 604 5882 Zaheer Patel Complaints Manager 0161 604 5884

Page 22: Risk Management Policy - pat.nhs.uk 11 Risk... · Risk Management Policy . ... Accident/Incident Reporting Policy and Fire ... July 2013 Please ensure you have the latest version

Pennine Acute Hospitals NHS Trust Risk Management Policy Version 6

Appendix E Arrangements for Monitoring Compliance with this Policy The arrangements for monitoring compliance of this policy in relation to the NHSLA minimum standards are summarised in the following table: Minimum requirement to be monitored

Process for Monitoring

Responsible Individual/ Group/Committee for Monitoring

Frequency of Monitoring

Responsible Individual/Group /Committee for Development of Action Plan

Responsible Individual/Group. Committee for Development of Action Plan

Responsible Individual/Group/ Committee for Monitoring of Action Plan

Accountability/responsibilities Review process Internal Audit Annual Risk Management Committee

Governance Director

Risk Management Committee

Risk assessment process Review process Internal Audit Annual Risk Management Committee

Governance Director

Risk Management Committee

Risk register process Review process Internal Audit Annual Risk Management Committee

Governance Director

Risk Management Committee

Management of risk locally Review process Internal Audit Annual Risk Management Committee

Governance Director

Risk Management Committee

Duties Review process Internal Audit Annual Risk Management Committee

Governance Director

Risk Management Committee

Actions Review process Internal Audit Annual Risk Management Committee

Governance Director

Risk Management Committee