The Control That Made Things Worse
A hospital trust suffered three medication-dosing errors in a year. In response it introduced a mandatory second-nurse sign-off for all high-risk drug administrations. Twelve months later, reported errors have fallen by 60%, but two serious errors occurred that were not caught by the second check. An audit finds that nurses on understaffed night shifts are signing both boxes themselves to avoid delaying treatment, and that the double-check has added 8 minutes to each administration, increasing pressure elsewhere. Staff describe the check as 'a box-ticking ritual'. The trust's board cites the 60% fall as evidence the control is working.
1. The board treats the fall in reported errors as proof of control effectiveness. Critically evaluate this and identify the actual risk position.
Read the worked answer
The reported fall is not evidence of fewer errors; it is consistent with at least three alternative explanations:
- Under-reporting. If the check is burdensome and staff are gaming it, errors caught (or missed) may simply not be logged.
- Displacement. The 8-minute delay pushes pressure into other steps, so errors may have moved rather than disappeared.
- Control failure at the point of use. Two serious errors passed a check that was nominally performed - meaning the control exists on paper and not in practice.
The audit finding that nurses sign both boxes is decisive: the control is being bypassed precisely when staffing is weakest, which is when error risk is highest. The trust's actual position may be worse than before, because the board now believes it is protected. A control that is not operating is worse than no control when it creates false assurance.
2. Recommend a treatment response that addresses the root cause rather than adding another layer of checking.
Read the worked answer
The root cause is not a missing check; it is a workload/staffing constraint at night combined with a control design that assumes slack. Recommendations:
- Redesign the control to be feasible under real conditions. Where two staff are genuinely unavailable, use a technology-assisted check (barcode scanning, dose-range alerts) rather than a human second signature that will be forged.
- Fix the constraint. Review night-shift staffing against administration volume; the 8-minute burden is a capacity problem, not a discipline problem.
- Measure control operation, not just outcomes. Audit the proportion of administrations where the second check was genuinely independent, and treat self-signing as a reportable control failure.
- Change the reporting incentive. Make it safe to report a bypass and a near-miss; the 60% figure should be retired as a success metric until reporting is trustworthy.
- Board reporting. Present the board with a control-effectiveness statement ('the check operated independently in X% of audited cases') rather than an outcome count that can be produced by silence.