Q&A: Basic risk assessment

Q: What is the basic model for a risk assessment?

A: A basic risk assessment is a process to proactively evaluate the potential for adverse impacts associated with system and processes, both internal and external to the organization, and related to patients, staff, visitors, and others with regard to patient care and safety or as required by law or regulation.

The basic model for risk assessment would likely include the following or a variation of the following steps for conducting a basic risk assessment:

1.  Identify the issue
2.  Identify arguments in support of the issue
3.  Identify arguments against the issue
4.  Evaluate both arguments
5.  Come to a conclusion
6.  Document the process
7.  Monitor the conclusion to ensure it is correct

When conducting a basic risk assessment, there are several elements of focus. These include an assessment of the valuables that need to be preserved or protected, identification of any threats that might be present or possible, identification of any potential areas of vulnerability or loss, and identification of the controls currently in place. The primary goal is to identify the probability of risk.