Hospital Medication Safety: Residual Risk Above Tolerance?
A six-hospital network with 1,400 beds reports about 3,100 medication incidents a year, including 42 incidents causing moderate or severe harm and two deaths over five years. The board’s risk appetite states that medication safety risks must be “medium or lower” on the network’s 5×5 matrix. The corporate register lists “medication error” at inherent score 20 (extreme) and residual score 12 (medium) after existing controls described only as “staff training” and “policy review.” The chief pharmacist is named risk owner but has no authority over nursing workflow or IT. A barcode medication administration (BCMA) pilot at one hospital reduced dispensing errors by 68%, but the full rollout would cost $4.2 million over five years plus $1.1 million a year in operating costs. The treatment plan contains “roll out training” and “review policy” with no dates, funding, or accountable executive. The board pack shows 55 green, 5 amber, and 0 red risks. The CFO says the medication risk is “within tolerance” because it is Medium.
1. Evaluate whether the existing controls and residual rating are credible under ISO 31000. What should happen before the risk is accepted?
Read the worked answer
Several things are not credible under ISO 31000.
- Controls: “staff training” and “policy review” are not direct controls for medication error. Training may support awareness, but it does not prevent slips, interruptions, look-alike labelling, or dispensing errors. Policy review is a governance action, not a barrier. Control effectiveness should be assessed with evidence: incident trends, audit results, observation, and error rates.
- Residual rating: a residual score of 12 is asserted, not derived. With 3,100 incidents and 42 harm events a year, the residual risk needs analysis of consequence severity, likelihood, existing barriers, and uncertainty. The matrix score may understate severity because it aggregates all medication errors.
- Tolerance: “medium or lower” makes Medium a boundary, not automatic acceptance. The board should define whether Medium is tolerable for medication safety given two deaths, and who may accept residual risk at that level.
- Ownership: the chief pharmacist owns the risk but lacks authority over nursing workflow and IT, so the owner cannot implement treatment.
Before acceptance, the network should verify control effectiveness, analyse harm severity and trends, assess BCMA evidence, and determine residual risk against criteria. If residual risk is at or above tolerance, it should be escalated with a treatment plan and a documented acceptance decision by the accountable executive or board. The CFO’s statement that it is “within tolerance” should be challenged: a score is not an acceptance decision.
2. Construct a treatment decision for BCMA. What elements must the treatment plan contain, and how should residual risk be evaluated?
Read the worked answer
Treatment selection under ISO 31000 6.4 should consider options, costs, benefits, feasibility, and residual risk. For medication error, options include:
- Reduce: BCMA, standardization, look-alike labelling separation, pharmacy verification, staffing and interruption controls.
- Avoid: remove high-risk products or workflows where feasible.
- Share: contractual or insurance arrangements (limited for patient safety).
- Accept: only with authority and monitoring.
BCMA has credible evidence (68% reduction in dispensing errors at the pilot) but is not a complete barrier: it can be bypassed, needs workflow design, training, IT support, and maintenance. The treatment plan should contain:
- Specific actions and scope (which hospitals, which medication routes).
- Accountable executive and operational owners.
- Resources and budget ($4.2m capital, $1.1m annual operating).
- Timeline and milestones.
- Expected risk reduction and method to measure it.
- Residual risk estimate, including uncertainty.
- Monitoring, reporting, and trigger points.
- Contingency if benefits are lower than expected.
Residual risk should be evaluated after realistic control effectiveness, not assuming full benefit. If residual risk remains Medium or above, the board must decide explicitly, with rationale. The plan should also address equity: rollout only where ready, without leaving high-risk sites unprotected.
3. How should the network record and report treatment decisions to the board so that the 0-red dashboard is not misleading?
Read the worked answer
Recording and reporting (6.6) should make the basis for decisions visible. The board pack showing 55 green, 5 amber, and 0 red is misleading because it aggregates, hides the medication risk at the tolerance boundary, and shows no treatment progress or acceptance decisions.
Records should include:
- Risk description, objectives affected, and risk owner.
- Inherent and residual ratings with rationale, data sources, and confidence.
- Control effectiveness evidence, not just control names.
- Treatment options considered, selection rationale, cost, benefit, and expected residual.
- Acceptance decisions: who accepted, at what level, with what conditions and review date.
- Action status, delays, and escalation.
Reporting should be by exception and trend: risks at or above tolerance, changes since last period, incidents and harm, treatment milestones, and decisions required. The board should see the medication risk explicitly, with the BCMA business case and residual risk, not a green dashboard. Minutes should record challenge and decisions. If the residual risk is above tolerance, the report should state that and name the accepting authority. This turns reporting from assurance theater into accountability.