Autoclave Resilience at St. Aiden's Hospital

The third autoclave is the strongest redundancy measure, but at £420,000 it exceeds the available £250,000 and the £300,000 capital threshold, so it cannot be funded in this cycle without a separate business case. That does not justify doing nothing. Within budget, I would combine the loaner agreement (£30,000), preventive maintenance contract (£90,000), sensor and control upgrade (£60,000), and staff training (£15,000): total £195,000, leaving £55,000. The loaner reduces consequence when a unit fails; maintenance reduces likelihood, especially on the 12-year-old Unit A; the sensor upgrade improves early detection and validation evidence; training addresses human error and contingency activation. This follows the hierarchy by using engineering controls where feasible and administrative controls as complements, not substitutes. The £55,000 should be held for repair contingency or business-case development, not spent automatically. The decision should record why the third autoclave was deferred, the interim risk reduction expected, owners, dates, and a review point. ALARP is satisfied only if the residual risk is documented and reviewed, not merely because the portfolio is affordable.

Residual risk is reduced but not eliminated. Unit A remains old, the loaner may take time to arrive and validate, and a 22-hour failure could still cause cancellations. A reasonable residual scenario is lower failure frequency and shorter recovery, but not zero backlog. Monitoring should cover: autoclave failures per quarter, mean time to repair, loaner activation time, validation pass rate, backlog hours, cancelled procedures, overdue maintenance, and sensor alerts. Suggested thresholds: two failures in a quarter triggers a formal review; any repair over 12 hours triggers root-cause analysis; loaner activation over six hours is a breach; any validation failure stops use until resolved. Report monthly to infection control and the risk committee. Reassess in six months using actual failure and repair data. If failures persist, the deferred third-autoclave business case should be reopened with evidence, not postponed indefinitely.

Simple acceptance is invalid because this is a patient-safety risk with regulatory requirements for validated cycles and documented contingency. Acceptance is appropriate only for low residual risk after controls, or where the risk is understood and consciously tolerated with justification. Here, the unmitigated single-point failure could cancel elective procedures and disrupt sterile services. If the business case is rejected, the board must document the decision, the reasons, and the interim controls, and set a time-bound plan for redundancy or an equivalent solution. The risk owner, likely the medical director or trust board, should sign the residual risk with a review date. The regulator may need to be informed if contingency cannot be evidenced. The board should also consider alternative redundancy options, such as a shared service with another hospital or a longer-term loaner arrangement. This is managed acceptance with escalation, not passive acceptance.