vaayaa Inclusive Education
Healthcare risk assessment

Mental Health, Psychiatry and Behavioral Support Risk Assessment: Safety, Escalation and Records Controls

A worked example of how a mental health service finds, scores and controls risks to patient safety, escalation, consent, records, staffing, infection exposure and professional scope.

Updated November 2026 8 hazards assessed Review every 3 months Highest risk: Critical to Medium
See the Mental Health, Psychiatry and Behavioral Support course

Executive summary

This assessment shows how a mental health service can find, rate and control the risks that matter most to the safety of people in its care. Eight risks were chosen because they are plausible in daily inpatient, community and behavioral support work. Missed deterioration and unescalated self-harm risk carry the highest inherent score, while medication error and restraint injury also need close attention. Each risk is scored before controls and again after existing and added controls. Most risks fall to Medium or Low once the additional controls are in place, but missed deterioration stays at Medium because the impact of a crisis remains severe. The first actions are a shared escalation threshold, a medication review register, individual de-escalation plans and a timed downtime drill. The service is a teaching example, so every score illustrates method, not a real organization.

Focus area
Mental health, psychiatry and behavioral support
Setting
Mixed inpatient and community mental health service with behavioral support teams and on-call psychiatric cover
Method
Five by five likelihood and impact risk register

Scope

This assessment covers a mixed inpatient and community mental health service, from admission and risk assessment through medication, observation, handover, records and discharge. It looks at risks to patient safety, staff safety, privacy and professional boundaries. It does not give clinical advice on any individual's diagnosis or treatment. Jurisdiction, service size and record systems are assumptions made for teaching.

Context

The service has adult inpatient wards, a community crisis team, a behavioral support team and a pharmacy service. Clinicians use a shared electronic record with downtime forms as a backup. Psychiatrists provide on-call cover at night, and nurses, support workers and psychologists work across settings. Each risk is scored before controls to show its natural level, then again after the existing controls and the additional controls that should be added. Scores are reviewed when indicators reach their thresholds.

Objectives, assets and stakeholders

The objective is to keep people safe, deliver timely and respectful care, protect privacy, and meet professional and legal duties. The assets in scope are patients, staff, clinical records, medicines, the electronic record system, equipment such as observation and restraint records, and the reputation of the service. Stakeholders include patients and families, nursing and medical staff, pharmacists, psychologists, support workers, the information governance team, regulators and commissioners. Clear roles matter: every risk has one owner role, and the clinical lead reports the register to the governance board each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H06 Likelihood 4, impact 4, score 16, high: H01 Likelihood 4, impact 5, score 20, critical: H02
3 Possible Likelihood 3, impact 3, score 9, medium: H07 Likelihood 3, impact 4, score 12, high: H04 H05 Likelihood 3, impact 5, score 15, high: H03
2 Unlikely Likelihood 2, impact 4, score 8, medium: H08
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely
3 Possible Likelihood 3, impact 2, score 6, medium: H06
2 Unlikely Likelihood 2, impact 2, score 4, low: H07 Likelihood 2, impact 3, score 6, medium: H01 H04 H05 Likelihood 2, impact 4, score 8, medium: H02 H03
1 Rare Likelihood 1, impact 3, score 3, low: H08
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Medication error during prescribing, dispensing or administration 16 High 6 Medium Lead pharmacist
H02 Missed deterioration and unescalated suicide or self-harm risk 20 Critical 8 Medium Clinical lead for mental health
H03 Restrictive practice and physical restraint injury 15 High 8 Medium Ward manager
H04 Breach of confidentiality, consent or documentation standards 12 High 6 Medium Information governance lead
H05 Clinical information system outage or data error 12 High 6 Medium Digital services manager
H06 Staffing shortfall and unsafe handover 12 High 6 Medium Director of nursing
H07 Infection and exposure in shared and high risk settings 9 Medium 4 Low Infection prevention and control lead
H08 Work beyond scope or competence in psychological and behavioral support 8 Medium 3 Low Clinical governance lead
H01

Medication error during prescribing, dispensing or administration

Safety Before 16 After 6

A wrong dose, wrong patient, missed interaction or psychotropic medicine given without a current review can cause sedation, falls, withdrawal or serious adverse effects in people with complex needs.

Who or what is affected: Patients, nurses, prescribers and pharmacy staff

Causes

Polypharmacy, rushed handovers and dose changes agreed by phone without written confirmation.

Consequences

Sedation, falls, withdrawal, toxicity or death, followed by complaint and formal inquiry.

Existing controls

  • Prescriptions are checked by a pharmacist before supply.
  • Medication administration is recorded electronically at the bedside.

Control gaps

Review dates are not tracked across community and inpatient records.

Additional controls

  • Prevent: Use decision support for interaction, allergy and renal checks at the point of prescribing.
  • Detect: Audit a weekly sample of prescriptions against review dates and dosing limits.
  • Respond: Hold the next dose and call the prescriber when a serious adverse effect is suspected.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Lead pharmacist Target: Within 30 days Early warning: Patients with a medication review overdue beyond the agreed interval.
H02

Missed deterioration and unescalated suicide or self-harm risk

Safety Before 20 After 8

Changes in mood, agitation, withdrawal or expressed intent are noticed late or recorded without escalation, so a crisis develops before a clinical response is made.

Who or what is affected: Patients, families, nursing staff and on-call clinicians

Causes

Unclear escalation thresholds, staff shortages and risk information that is recorded but not acted on.

Consequences

Self-harm, suicide, serious injury, formal inquiry and loss of public trust.

Existing controls

  • A risk assessment is completed at admission and after any incident.
  • Observation levels are set by a clinician and reviewed each shift.

Control gaps

Escalation thresholds differ between wards and out-of-hours teams.

Additional controls

  • Prevent: Use a structured risk formulation template that is updated at each shift handover.
  • Detect: Apply a validated early warning tool and review trend charts each day.
  • Respond: Escalate to the duty psychiatrist within the agreed time for any high risk score.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Clinical lead for mental health Target: Within 14 days Early warning: Observation level unchanged after a reported increase in risk.
H03

Restrictive practice and physical restraint injury

Safety Before 15 After 8

Seclusion, physical holds or restraint used during agitation can injure the person or staff, and may be used more than needed when de-escalation has not been tried first.

Who or what is affected: Patients, staff and visitors

Causes

Acute distress, untreated pain, sensory overload and staff fear of violence.

Consequences

Physical injury, trauma, complaints and regulatory scrutiny.

Existing controls

  • Restraint is limited to trained staff and recorded in the incident system.
  • A review meeting is held after each use of restraint or seclusion.

Control gaps

Individual de-escalation plans are not yet in place for every admitted patient.

Additional controls

  • Prevent: Agree individual de-escalation plans and sensory options for patients likely to become distressed.
  • Detect: Review restraint and seclusion records weekly for frequency, duration and injury.
Likelihood 3 x impact 5 before; 2 x 4 after Owner: Ward manager Target: Within 60 days Early warning: Rising count of restrictive interventions on one ward over four weeks.
H04

Breach of confidentiality, consent or documentation standards

Legal and compliance Before 12 After 6

Records are shared without a lawful or agreed basis, consent is assumed rather than recorded, or notes are inaccurate, judgmental or incomplete, which harms privacy and care.

Who or what is affected: Patients, families, staff and records managers

Causes

Pressure to share information quickly, unclear consent records and copied or template notes.

Consequences

Privacy harm, complaints, regulatory action and loss of patient trust.

Existing controls

  • Access to records is role based and access logs are kept.
  • Staff complete information governance training when they join.

Control gaps

Consent and sharing status is not visible on the front page of the record.

Additional controls

  • Prevent: Record consent decisions and sharing limits at the start of each episode of care.
  • Detect: Audit a monthly sample of access logs and case notes for accuracy and fairness.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Information governance lead Target: Within 45 days Early warning: Record access by a staff member with no recorded care relationship.
H05

Clinical information system outage or data error

Technology and data Before 12 After 6

Loss of access to the electronic record, a failed alert or a wrong result on screen can delay medication, risk review and handover, especially during outages or after system changes.

Who or what is affected: Patients, clinicians and the digital support team

Causes

Unplanned outage, software updates and manual data entry errors during downtime.

Consequences

Delayed care, missed alerts, wrong medicines and records that cannot be fully rebuilt.

Existing controls

  • Records are backed up each night and restores are tested each quarter.
  • Paper downtime forms are kept at each ward station.

Control gaps

Downtime forms are not reconciled back into the record quickly enough.

Additional controls

  • Prevent: Test system changes in a separate environment before release to clinical use.
  • Recover: Run a timed downtime drill and restore records from the latest verified backup.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Digital services manager Target: Within 60 days Early warning: More than two downtime events or failed clinical alerts in one month.
H06

Staffing shortfall and unsafe handover

People Before 12 After 6

Vacancies, sickness and temporary staff reduce observation and clinical oversight, and handovers omit risk, medication changes or follow up, leaving people without the care they need.

Who or what is affected: Patients, nursing and support staff, and on-call clinicians

Causes

Recruitment gaps, high sickness and reliance on temporary staff who do not know the patients.

Consequences

Missed observations, unsafe care, medication errors and staff burnout.

Existing controls

  • Safe staffing levels are reviewed at the start of each shift.
  • A structured handover sheet is used for each ward.

Control gaps

Handover sheets are completed but not checked in person at each change.

Additional controls

  • Prevent: Set a minimum staffing level that triggers a reduction in admissions or activity.
  • Detect: Review missed observations and unfilled shifts each day against the staffing plan.
  • Respond: Call the escalation rota and move patients to a safer area if levels fall below the floor.
Likelihood 4 x impact 3 before; 3 x 2 after Owner: Director of nursing Target: Within 30 days Early warning: Shifts covered by temporary staff with no senior clinician on site.
H07

Infection and exposure in shared and high risk settings

Safety Before 9 After 4

Respiratory infection, blood borne exposure from sharps, or injury during a sudden incident, along with poor hand hygiene in shared rooms, can spread illness to patients, staff and visitors.

Who or what is affected: Patients, staff, visitors and cleaning contractors

Causes

Shared lounges, crowded wards and delayed isolation decisions.

Consequences

Outbreak, staff absence, exposure requiring treatment and distress for those involved.

Existing controls

  • Hand hygiene stations are stocked and checked each shift.
  • Sharps bins are placed in every treatment room.

Control gaps

Cleaning schedules for shared lounges are not audited against a standard.

Additional controls

  • Prevent: Review isolation needs at admission and whenever symptoms appear, with clear room allocation.
  • Respond: Follow the post exposure procedure and record the incident within the same shift.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Infection prevention and control lead Target: Within 60 days Early warning: Two or more linked infections on the same ward within 14 days.
H08

Work beyond scope or competence in psychological and behavioral support

Legal and compliance Before 8 After 3

Staff or volunteers give therapy, assessment or digital contact outside their training or registration, or without supervision, which can leave people with unsafe advice and unclear accountability.

Who or what is affected: Patients, supervisors and the wider service

Causes

Unclear role boundaries, staff shortages and informal peer advice given without records.

Consequences

Unsafe care, professional sanction and loss of confidence in the service.

Existing controls

  • Role descriptions state the activities each grade may perform.
  • New staff are supervised closely during their first months.

Control gaps

Digital contact between sessions is not covered by the current role descriptions.

Additional controls

  • Prevent: Check registration and training before any clinical role is assigned.
  • Detect: Review case notes each quarter for activity outside the agreed scope.
Likelihood 2 x impact 4 before; 1 x 3 after Owner: Clinical governance lead Target: Within 90 days Early warning: Case notes showing treatment decisions made by a staff member without supervision.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Negligible to Catastrophic. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. The score guides the order of work and is not a precise measurement. Inherent risk is the score before any controls. Residual risk is the score after the existing and added controls. Impact is judged on harm to the person, harm to staff, effect on privacy and trust, and the time needed to put things right. A risk to life or serious harm is never rated down only because it has not happened yet. Anything still High needs senior clinical attention and a dated plan, anything Medium needs routine controls with a named owner, and anything Low is accepted and watched. Clinical staff who do the work should challenge the ratings, and the register is reviewed whenever an indicator reaches its threshold or after a serious incident.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 3 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Observation level unchanged after a reported increase in risk.Escalate to the duty psychiatrist at once, and to the clinical lead if the level is still unchanged after one hour.
Medication reviews overdue beyond the agreed interval.Escalate to the lead pharmacist when any review is overdue, and to the clinical lead if more than five remain open after a week.
Restrictive interventions on one ward rising over four weeks.Escalate to the ward manager when the count rises, and to the director of nursing if it does not fall after a month.
Record access without a recorded care relationship.Escalate to the information governance lead within one working day, and suspend the user's access until the review is complete.
Shifts covered by temporary staff with no senior clinician on site.Escalate to the director of nursing before the shift starts, and invoke the escalation rota if cover cannot be found.

Contingency arrangements

If a serious event occurs, such as a suicide, a serious medication error or a data breach, the clinical lead stops the related process, secures the record and informs the duty senior manager. Affected staff receive immediate support and a debrief. The digital manager isolates any affected system and restores data from the latest verified backup. Legal, regulatory and family contacts are made through the designated senior manager as the relevant rules require. Continuity is protected by a named cover rota and by moving patients to a safer setting where needed.

Prioritized action plan

  1. Agree one escalation threshold for risk across all wards and the out-of-hours team, owner clinical lead for mental health, within 14 days.
  2. Create a medication review register across inpatient and community records, owner lead pharmacist, within 30 days.
  3. Put individual de-escalation plans in place for all admitted patients, owner ward manager, within 60 days.
  4. Run a timed downtime drill and reconcile paper forms back into the record, owner digital services manager, within 60 days.
  5. Set a minimum staffing trigger and a verified handover step at every change of shift, owner director of nursing, within 30 days.

Conclusion

Safe mental health care depends on a few steady habits: shared escalation thresholds, tracked medication reviews, individual de-escalation plans, accurate and consented records, tested downtime procedures and safe staffing at every handover. The highest scores sit with missed deterioration, medication error and restraint injury, and each has actions that bring the residual score down. Treat the register as a living record, review it on the stated cycle, and seek advice from licensed clinicians and qualified legal counsel for any real clinical, legal or regulatory question.

Assumptions and limitations

Assumptions

  • Jurisdiction is not specified, so legal, consent and mental health law duties are described in general terms only.
  • The service is a mixed inpatient and community setting with a shared clinical record and on-call psychiatric cover.
  • Staff are registered or licensed professionals in defined roles, supervised by senior clinicians.

Limitations

  • The scores are teaching examples and do not describe any real service, patient group or clinical team.
  • Mental health law, clinical guidance and professional codes vary by country and change over time, so specialist review is needed.
  • This content is educational and does not replace a formal site-specific assessment or advice from licensed clinicians and legal counsel.

Related frameworks to study

  • Hierarchy of controls
  • Three lines model of risk ownership
  • Structured early warning scoring approach
  • Plan, do, study, act improvement cycle
  • Principles of informed consent and confidentiality

Healthcare Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

Mental Health, Psychiatry and Behavioral Support course Read the best practices for this course

More Healthcare risk assessments

Hourly Active: 35,661 Learners