vaayaa Inclusive Education
Healthcare risk assessment

Diagnostic and Interventional Radiology Risk Assessment: Patient Safety, Privacy and Continuity Controls

A worked example showing how a radiology service identifies, scores and controls risks to patients, staff and imaging data, from wrong-site procedures and contrast reactions to radiation dose, privacy, equipment outages and delayed urgent results.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to Medium
See the Diagnostic and Interventional Radiology course

Executive summary

This assessment shows how an imaging department can find, rate and control the risks that matter most to patients, staff and data. Eight hazards were selected because they are plausible in routine scanning, image-guided procedures, reporting and support work. Wrong-site procedures and delayed communication of urgent findings carry the highest inherent scores, followed by contrast reactions, privacy breaches, equipment outages and infection risk. Each risk is scored before controls and again after existing and additional controls. Most fall to Medium or Low once the proposed controls are in place, though wrong-site risk remains Medium because the harm stays severe. The first actions are a timed pause before every invasive procedure, a structured handover for urgent results and a rehearsed downtime routine for the picture archiving system. The service is a teaching example, so every score illustrates method rather than a real clinical position.

Focus area
Diagnostic and interventional radiology
Setting
Hospital imaging department with diagnostic scanners, an interventional suite and a picture archiving system
Method
Five by five likelihood and impact risk register with residual scoring

Scope

This assessment covers a hospital imaging department that offers diagnostic imaging and image-guided interventional procedures, from referral and consent through scanning, reporting, handover and follow up. It looks at risks to patients, staff, imaging data and service continuity. Jurisdiction, staffing levels, equipment vendors and the local procedure list are assumptions made for teaching. It does not set clinical protocols, dose limits or treatment decisions, which need specialist review in any real service.

Context

The department runs plain radiography, computed tomography, ultrasound, fluoroscopy and a small interventional suite used for drainage, biopsy and vascular procedures. Radiographers, radiologists, interventional nurses, sedation staff and clerical teams share one scheduling and reporting system, and images are stored in a picture archiving system linked to the wider hospital record. Patients arrive from wards, clinics and emergency departments, often with limited time to prepare. Each hazard is scored before controls to show its natural level, then after the existing controls and the additional controls proposed here.

Objectives, assets and stakeholders

The objective is to deliver safe, accurate and timely imaging, protect patients from avoidable harm and unnecessary radiation, keep images and reports private and available, and maintain the trust of referring teams and the public. Assets in scope include the scanners and interventional equipment, the picture archiving and reporting systems, the schedule, consent records, dose records, contrast and sedation stocks, and the skills of the teams. Stakeholders include patients and families, radiographers, radiologists, interventional nurses, sedation staff, medical physics, referring clinicians, the information governance lead and the hospital board. Every risk has one owner role, and the radiology lead reviews the register with the clinical governance group each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 4, score 16, high: H04 Likelihood 4, impact 5, score 20, critical: H01
3 Possible Likelihood 3, impact 3, score 9, medium: H03 H07 Likelihood 3, impact 4, score 12, high: H02 H05 H06
2 Unlikely Likelihood 2, impact 5, score 10, high: H08
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely
3 Possible
2 Unlikely Likelihood 2, impact 2, score 4, low: H03 Likelihood 2, impact 3, score 6, medium: H02 H05 H06 H07 Likelihood 2, impact 4, score 8, medium: H01 H04 H08
1 Rare
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Wrong patient or wrong site procedure 20 Critical 8 Medium Radiology lead
H02 Contrast media and sedation reaction 12 High 6 Medium Senior radiographer
H03 Radiation dose higher than needed 9 Medium 4 Low Medical physics lead
H04 Delayed communication of urgent findings 16 High 8 Medium Consultant radiologist
H05 Privacy breach of images and reports 12 High 6 Medium Information governance lead
H06 Picture archiving system outage 12 High 6 Medium Imaging systems manager
H07 Staff competence, fatigue and skill mix 9 Medium 6 Medium Radiology education lead
H08 Infection and exposure in the interventional suite 10 High 8 Medium Infection prevention lead
H01

Wrong patient or wrong site procedure

Safety Before 20 After 8

A procedure is performed on the wrong patient, body side or level because identity or site checks are rushed, skipped or unclear for urgent or complex cases.

Who or what is affected: Patients, interventional team and referring clinicians

Causes

Busy lists, emergency cases, similar patient names and handovers made under pressure.

Consequences

Avoidable harm, additional procedures, complaints and a serious safety investigation.

Existing controls

  • Patients state their name and date of birth on arrival.
  • A written site marking is required for procedures with a side or level.

Control gaps

The timed pause is not always completed for urgent cases, and site marks are sometimes absent.

Additional controls

  • Prevent: Use a timed pause with two identifiers and site confirmation before every invasive procedure.
  • Detect: Audit a sample of procedure records against the request each month and record any discrepancies.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Radiology lead Target: Within 30 days Early warning: Procedures started without a completed timed pause or identity check recorded.
H02

Contrast media and sedation reaction

Safety Before 12 After 6

Patients react to iodinated contrast or sedative drugs with allergy-like reactions, breathing or circulation changes, or unexpected drug interactions that the screening questions did not identify.

Who or what is affected: Patients, radiographers and sedation staff

Causes

Incomplete medical history, previous reactions not recorded and unusual drug combinations.

Consequences

Severe reaction, emergency transfer, longer hospital stay and possible lasting harm.

Existing controls

  • Allergy and kidney function questions are asked at booking.
  • Resuscitation equipment and emergency drugs are checked each shift.

Control gaps

Records from outside the hospital are rarely checked before the scan takes place.

Additional controls

  • Prevent: Screen each patient against written criteria and record the decision before contrast is given.
  • Respond: Run a reaction drill twice a year and keep a named clinician on call for the interventional suite.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Senior radiographer Target: Within 30 days Early warning: Reactions recorded in the month, or screening forms left incomplete at the point of scan.
H03

Radiation dose higher than needed

Safety Before 9 After 4

Patients or staff receive more radiation than necessary because protocols are not tailored to body size or age, repeat images are taken, or dose records are not reviewed.

Who or what is affected: Patients, pregnant staff and radiographers

Causes

Standard settings used without adjustment, pressure to rescan and unclear dose records.

Consequences

Long term harm risk, regulatory concern and loss of public trust.

Existing controls

  • Scanners use standard protocols for common examinations.
  • Staff wear personal dosimeters that are issued and collected.

Control gaps

Dose records are collected but not compared with repeat rates by scanner room.

Additional controls

  • Prevent: Review protocols for children and larger patients with medical physics and record the approved settings.
  • Detect: Review dose reports and repeat rates each quarter against local reference levels.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Medical physics lead Target: Within 90 days Early warning: Repeat rate above the agreed level for any examination room.
H04

Delayed communication of urgent findings

Operational Before 16 After 8

Urgent or unexpected findings are not passed to the referring team in time because reports wait in a queue, calls are missed or handovers are unstructured.

Who or what is affected: Patients, ward teams and emergency clinicians

Causes

Night and weekend workload, unclear contact details and shift changes.

Consequences

Delayed treatment, patient deterioration and possible complaints.

Existing controls

  • Critical results are phoned to the requesting clinician.
  • Reports are prioritized in the reporting queue by urgency code.

Control gaps

Contact details for ward staff are out of date, and calls are logged on paper.

Additional controls

  • Prevent: Use a structured handover tool with read back confirmation for every urgent finding.
  • Respond: Escalate unacknowledged urgent results to the duty consultant after the agreed interval.
Likelihood 4 x impact 4 before; 2 x 4 after Owner: Consultant radiologist Target: Within 45 days Early warning: Urgent findings not acknowledged by the receiving clinician within the agreed time.
H05

Privacy breach of images and reports

Technology and data Before 12 After 6

Images, reports or schedules are viewed, shared or sent to the wrong person through misdirected messages, shared logins, copies on portable devices or access by staff with no clinical need.

Who or what is affected: Patients, families and staff

Causes

Shared workstations, rushed sharing with referrers and unclear rules on personal devices.

Consequences

Breach of trust, notification duties, disciplinary action and harm to patients.

Existing controls

  • Users sign in with individual accounts, and access is role based.
  • Staff complete annual information governance training.

Control gaps

Access logs are reviewed only after a complaint has been made.

Additional controls

  • Prevent: Remove access for users who have not used the system in the last quarter and block copies to portable devices.
  • Detect: Review access logs for records viewed without a linked appointment and follow up each case.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Information governance lead Target: Within 60 days Early warning: Access to records by users with no linked appointment or referral.
H06

Picture archiving system outage

Technology and data Before 12 After 6

The picture archiving system, scanner network or scheduling software fails, so images cannot be viewed, reports cannot be issued and procedures are delayed or cancelled.

Who or what is affected: Patients, referrers and imaging staff

Causes

Hardware faults, failed software updates and network loss.

Consequences

Cancelled lists, delayed diagnosis and extra patient transfers.

Existing controls

  • Servers are backed up nightly, and copies are held off site.
  • Scanners can store images locally for a short period.

Control gaps

The downtime routine has not been rehearsed under realistic conditions.

Additional controls

  • Prevent: Keep a tested standby viewing workstation with a secure copy of recent images.
  • Recover: Test a full restore each year and record the time taken against the agreed recovery target.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Imaging systems manager Target: Within 90 days Early warning: Picture archiving system outages longer than the agreed downtime window.
H07

Staff competence, fatigue and skill mix

People Before 9 After 6

Staff perform procedures or reports beyond their current competence, or work while fatigued through long lists, so errors go unnoticed and supervision is thin.

Who or what is affected: Patients, junior staff and the wider team

Causes

Rapid staff turnover, cover shortages and pressure to keep lists moving.

Consequences

Technical errors, missed findings and staff burnout.

Existing controls

  • Competency sign off is required before a person works unsupervised.
  • The rota limits consecutive long shifts.

Control gaps

Competency records are not checked against the procedures actually carried out.

Additional controls

  • Prevent: Set a clear list of procedures each grade may perform unsupervised and check it at each rota change.
  • Detect: Review training records and supervised case logs each quarter against the procedures actually done.
Likelihood 3 x impact 3 before; 2 x 3 after Owner: Radiology education lead Target: Within 60 days Early warning: Staff working above the agreed hours or performing a procedure without a current sign off.
H08

Infection and exposure in the interventional suite

Safety Before 10 After 8

Patients are exposed to infection through poor hand hygiene, contaminated equipment or incomplete cleaning between procedures, and staff are exposed to blood or body fluids during invasive work.

Who or what is affected: Patients, staff and visitors

Causes

Heavy lists, reusable equipment and busy teams working under time pressure.

Consequences

Healthcare associated infection, staff exposure and temporary suite closure.

Existing controls

  • Sterile packs and single use items are used for invasive procedures.
  • Cleaning between cases follows a written checklist.

Control gaps

Checklist use is recorded inconsistently, and cleaning standards are not audited.

Additional controls

  • Prevent: Audit hand hygiene and sterile field practice each month and give feedback to the team.
  • Respond: Follow an agreed exposure response, including immediate reporting and occupational health review.
Likelihood 2 x impact 5 before; 2 x 4 after Owner: Infection prevention lead Target: Within 45 days Early warning: Missed hand hygiene or unrecorded cleaning checks found in audits.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Insignificant to Catastrophic, with harm to a patient weighted most heavily. Multiplying the two gives a score from 1 to 25 in four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. Inherent risk is the score before any controls. Residual risk is the score after existing and additional controls, and it can never be higher than the inherent score. Where the inherent score is 10 or more, the residual score must be lower. Critical and High risks need senior attention and a dated plan with a named owner. Medium risks need routine controls and regular checks. Low risks are accepted and monitored. Ratings are challenged by the staff who do the work, by a second reviewer who did not score the risk, and by incident and near miss data. A rating is reviewed whenever an indicator reaches its escalation threshold or a related incident occurs. The score is a guide for ordering work, not a precise measurement.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Procedures started without a completed timed pause or identity check recorded.Escalate to the radiology lead the same day, and to the clinical governance group if it happens more than once in a month.
Urgent findings not acknowledged by the receiving clinician within the agreed time.Escalate to the duty consultant radiologist when a result is unacknowledged after the agreed interval, and to the head of department if it recurs.
Unexpected contrast or sedation reactions recorded in the month.Escalate each event to the senior radiographer, and to medical physics and the radiology lead if the count rises above the agreed level.
Picture archiving system outages longer than the agreed downtime window.Escalate to the imaging systems manager at once, and to the hospital digital lead if the outage exceeds the downtime window.
Accounts with access to images or reports that have not been reviewed in the last quarter.Escalate to the information governance lead, who removes or confirms each account within a week and reports to the head of department.

Contingency arrangements

If a serious event occurs, such as a wrong-site procedure, a severe contrast reaction or a prolonged loss of the imaging system, the duty radiologist or consultant stops the procedure and gives immediate clinical care under the local emergency protocol. The incident is reported, the patient and family are told openly, and records are preserved. If the picture archiving system is down, the downtime routine moves to local viewing, paper request logs and agreed transfer of urgent patients. The information governance lead is told of any suspected data exposure and works with the head of department on any required notifications.

Prioritized action plan

  1. Introduce a timed pause with two identifiers before every invasive procedure, owner radiology lead, within 30 days.
  2. Adopt a structured handover tool for urgent findings with read back confirmation, owner consultant radiologist, within 45 days.
  3. Set a contrast reaction drill and check emergency kit stock weekly, owner senior radiographer, within 30 days.
  4. Review access to images and reports and remove unused accounts, owner information governance lead, within 60 days.
  5. Test the picture archiving downtime routine under realistic conditions and record results, owner imaging systems manager, within 90 days.

Conclusion

Safe imaging relies on a few reliable habits: correct identity checks, a timed pause before invasive work, structured handover of urgent findings, careful consent, dose awareness and tested downtime routines. The highest inherent scores sit with wrong-site procedures and delayed urgent results, and each carries actions that bring the residual score down. Treat the register as a living record, review it on the stated cycle and seek specialist clinical, medical physics and legal advice for any real decision.

Assumptions and limitations

Assumptions

  • The department is part of a general hospital with a radiology lead, a medical physics service and a formal incident reporting system.
  • Staff hold current professional registration and training for their role, and procedures follow local protocols approved by specialists.
  • Imaging data is stored on hospital managed systems with individual user accounts and a separate backup service.
  • Jurisdiction and privacy rules are not named, so legal duties are described only in general terms.

Limitations

  • The scores are examples for learning and do not describe any real department, patient group or incident.
  • Clinical, radiation protection and privacy rules vary by location and change over time, so specialist review is needed.
  • This is educational content and is not clinical, medical physics or legal advice.

Related frameworks to study

  • Hierarchy of controls
  • Root cause analysis
  • Time out checklist before invasive procedures
  • SBAR structured handover
  • ALARA principle for radiation dose

Healthcare Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

More Healthcare risk assessments

Hourly Active: 39,499 Learners