skip to primary navigation skip to content

SSA Toolkit

Set risk criteria

 

Set risk criteria

Set risk criteria

Setting the risk criteria to use in the assessment

This section looks at how to set the risk criteria that will be used later in the SSA to judge the level of risk. It is important to do this now, before the main assessment is started, to avoid performing risk calculations with the wrong criteria. This can be an issue because many NHS Trusts set their own risk criteria and require that these are followed in any risk assessment. It is therefore important to find out the Trust's policy and obtain a copy of their risk criteria, if relevant, early in the SSA process. Setting the risk criteria at this point also ensures that they are ready to hand when needed later.

On this page:

Set risk criteria is the third activity in the Examine phase of an SSA

Set risk criteria is an activity in the Examine phase of SSA


Setting impact and likelihood definitions

Risk criteria typically include definitions of different levels of impact and likelihood, such as those shown below. Impact refers to the severity of a problem, for example whether it causes death, injury or merely a delay. Likelihood refers to how likely or probable it is that the problem will occur, for example it may be extremely unlikely or very likely. The definitions are used when assessing a risk to give numerical scores to its impact and likelihood, which are usually rated between 1 and 5. Risk scores can then be calculated by multiplying the two values together, giving a maximum possible score of 25. Both impact and likelihood are explained further in the Analyse risk activity.

A table of impact score definitions. A score of 1 (Negligible) is defined as: Minimal injury requiring no/minimal intervention or treatment, No time off work required. A score of 2 (Minor) is defined as: Minor injury or illness requiring minor intervention, Requiring time off work for less than 3 days, Increase in length of hospital stay by 1 to 3 days. A score of 3 (Moderate) is defined as: Moderate injury requiring professional intervention, Requiring time off work for 4 to 14 days, Increase in length of hospital stay by 4 to 15 days, RIDDOR/agency reportable incident. A score of 4 (Major) is defined as: Major injury leading to long-term incapacity/disability, Requiring time off work for more than 14 days, Increase in length of hospital stay by more than 15 days, Mismanagement of patient care with long-term effects. A score of 5 (Catastrophic) is defined as: Incident leading to death, Multiple permanent injuries or irreversible health effects, An event which impacts on a large number of patients.
Excerpt from a set of impact definitions in the domain of ‘Impact on the safety of patients, staff or public (physical/psychological harm)’ (from A risk matrix for risk managers)

A table of likelihood score definitions. A score of 1 (Rare) is defined as: This will probably never happen or recur. A score of 2 (Unlikely) is defined as: Do not expect it to happen or recur but it is possible it may do so. A score of 3 (Possible) is defined as: Might happen or recur occasionally. A score of 4 (Likely) is defined as: Will probably happen or recur but is not a persistent issue. A score of 5 (Almost certain) is defined as: Will undoubtedly happen or recur, possibly frequently.

Excerpt from a set of likelihood definitions using broad descriptors of frequency (from A risk matrix for risk managers)

 

As mentioned above, risk criteria are often set by NHS Trusts. However, if Trust risk criteria are not available, then a full set of criteria that can be used in healthcare projects is provided in A risk matrix for risk managers, available from the NHS National Patient Safety Agency (a body which has now been transferred into NHS England). Some examples of criteria are also given above. However, note that these are not complete.

Putting ‘Setting impact and likelihood definitions’ into practice

Space to record this information is provided in the SSA Assessment Form. To do this:

  1. Select the ‘Set risk criteria’ page in the Assessment Form.
  2. List any risk criteria documents and guidelines that need to be referred to in the box headed Documents.
  3. Other documents relevant to the assessment could also be noted in this box. These might include other policies, procedures or reports.
Screenshot of Set risk criteria page of the assessment form

Case Study

The completed ‘Set risk criteria’ page from the Section 136 case study is shown opposite. Further explanation of this stage in the case study can be found on the Section 136 page about Setting impact and likelihood definitions.


Setting the risk bands

The risk criteria also contain information on what types of action are required for different risk scores. This is often presented by grouping risk scores into bands and colour coding them, as in the example below. Different Trusts may use different numbers of bands and different colours, although red is typically used for high risks. For such risks, the risk criteria may mandate that actions be taken to lower the risks. Green is usually used for lower risks that may not require immediate action.

In this example, a risk of 1 to 7 is a low risk (green) that can be accepted. 8 to 15 is a moderate risk (orange), requiring management action. 16 to 25 is a high risk (red), requiring senior management action. Some more specific actions for each band are also specified.

Example of risk criteria from a risk assessment procedure document (Image courtesy of Cambridge University Hospitals NHS Foundation Trust)

As mentioned above, risk criteria (including risk bands) are often set by NHS Trusts. However, if Trust risk criteria are not available, then the bands listed in the example above could be used. Alternatively, a full set of criteria that can be used in healthcare projects is provided in A risk matrix for risk managers, available from the NHS National Patient Safety Agency (a body which has now been transferred into NHS England).

Putting ‘Setting the risk bands’ into practice

Space to record this information is provided in the SSA Assessment Form. To do this:

  1. Select the ‘Set risk criteria’ page in the Assessment Form.
  2. Describe the criteria that will be used to categorise the risk scores in the box headed Risk bands. In the spreadsheet verson of the form, replace the descriptions of the colour bands with the definitions that you wish to use. These will be then used to automatically colour-code the risk scores later in the SSA. Alternatively, remove this if you do not want to use automatic colour coding.
Screenshot of Set risk criteria page of the assessment form

Case Study

The completed ‘Set risk criteria’ page from the Section 136 case study is shown opposite. Further explanation of this stage in the case study can be found on the Section 136 page about Setting risk bands.