vaayaa Inclusive Education
Healthcare risk assessment

Pathology and Clinical Laboratory Medicine Risk Assessment: Specimen, Result and Safety Controls

A worked example of how a hospital pathology laboratory identifies, scores and controls risks to patient safety, result reliability, staff and confidential data, from specimen error to analyser failure and privacy breach.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to Medium
See the Pathology and Clinical Laboratory Medicine course

Executive summary

This assessment shows how a hospital pathology laboratory can find, rate and control the risks that matter most to patient safety and to the reliability of test results. Eight hazards were chosen because they are plausible in everyday laboratory, clinical and information work. Specimen identification and critical result communication carry the highest potential harm, so they are scored Critical or High before controls. Each hazard is rated before controls and again after existing and added controls. Most fall to Medium or Low once controls are in place, but specimen misidentification stays High until labelling and verification are fully embedded. The first actions are a two identifier check at collection, a tested critical result pathway and a practised downtime procedure. The scores are teaching examples, and specialist review is needed for any real service.

Focus area
Pathology and clinical laboratory medicine
Setting
Hospital pathology laboratory serving inpatient wards, outpatient clinics and emergency services
Method
Five by five likelihood and impact clinical risk register

Scope

This assessment covers a hospital pathology laboratory, from specimen collection and transport through testing, result release, storage and disposal. It looks at risks to patients, staff, results and confidential information. It does not cover individual diagnosis or treatment decisions. Jurisdiction, analyser models and staffing structure are assumptions made for teaching.

Context

The laboratory receives requests from inpatient wards, outpatient clinics and emergency departments. Samples are collected by clinical staff and transported to the laboratory, where automated analysers run haematology, chemistry and microbiology tests. Results are released through a laboratory information system and sent to clinicians electronically or by phone. A consultant pathologist oversees reporting, and the service is reviewed through internal and external quality processes. Each risk is scored before controls to show its natural level, then again after existing and added controls.

Objectives, assets and stakeholders

The objective is to deliver accurate, timely and safe test results, protect patients, staff and confidential information, and keep the service able to operate during disruption. The assets in scope are specimens, analysers, the laboratory information system, reagents and consumables, patient records, the laboratory premises and the professional reputation of the service. Stakeholders include patients and families, ward and clinic clinicians, laboratory scientists and technicians, the consultant pathologist, the information governance function, occupational health, suppliers and the clinical governance group. Each risk has one owner role, and the laboratory manager keeps the register current and reports to the clinical governance group each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H06 Likelihood 4, impact 5, score 20, critical: H01
3 Possible Likelihood 3, impact 3, score 9, medium: H08 Likelihood 3, impact 4, score 12, high: H03 H04 H05 Likelihood 3, impact 5, score 15, high: H02
2 Unlikely Likelihood 2, impact 4, score 8, medium: H07
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely
3 Possible Likelihood 3, impact 2, score 6, medium: H06
2 Unlikely Likelihood 2, impact 2, score 4, low: H07 H08 Likelihood 2, impact 3, score 6, medium: H03 H04 H05 Likelihood 2, impact 4, score 8, medium: H01 H02
1 Rare
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Specimen misidentification or labelling error 20 Critical 8 Medium Laboratory quality lead
H02 Delayed or missed critical result communication 15 High 8 Medium Consultant pathologist
H03 Analyser, information system or network failure 12 High 6 Medium Laboratory information systems lead
H04 Exposure to infectious and hazardous material 12 High 6 Medium Infection prevention lead
H05 Breach of confidentiality and consent for results 12 High 6 Medium Information governance lead
H06 Staffing shortfall and competence gaps 12 High 6 Medium Laboratory manager
H07 Handover and interpretation errors between shifts 8 Medium 4 Low Clinical laboratory supervisor
H08 Reagent, consumable or supplier shortage 9 Medium 4 Low Procurement lead
H01

Specimen misidentification or labelling error

Safety Before 20 After 8

A specimen is labelled with the wrong patient identity, collected from the wrong site or placed in the wrong container, so results are attached to the wrong person and clinical decisions go astray.

Who or what is affected: Patients, clinicians and laboratory staff

Causes

Busy wards, similar patient names, handwritten labels and rushed collection during peak periods.

Consequences

Wrong treatment, harm to patients, repeat tests and a serious incident review.

Existing controls

  • Patient identifiers are printed on request forms and labels.
  • Collection staff are trained in the two identifier check.

Control gaps

Labels applied after collection are not always checked against the patient record.

Additional controls

  • Prevent: Require two identifiers checked against the request at the bedside before every collection.
  • Detect: Audit a sample of labelled specimens each week and record mismatches for review.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Laboratory quality lead Target: Within 30 days Early warning: Repeated labelling rejections from one ward within a month.
H02

Delayed or missed critical result communication

Safety Before 15 After 8

A result that needs urgent action is not telephoned or escalated to a responsible clinician in time, so treatment is delayed and the patient may deteriorate before anyone responds.

Who or what is affected: Patients, ward teams and on-call clinicians

Causes

Night shifts, unclear ownership of calls and results sent to shared inboxes.

Consequences

Delayed treatment, deterioration, avoidable harm and a serious incident.

Existing controls

  • Critical values are flagged automatically by the analyser software.
  • Results marked urgent are phoned to the ward by the reporting scientist.

Control gaps

Acknowledgement is not recorded consistently and call logs are not reviewed.

Additional controls

  • Prevent: Publish a written critical result list with timed call and read back steps.
  • Respond: Escalate any unacknowledged critical result to the duty consultant after a fixed interval.
Likelihood 3 x impact 5 before; 2 x 4 after Owner: Consultant pathologist Target: Within 30 days Early warning: Critical results without a recorded acknowledgement within the set time.
H03

Analyser, information system or network failure

Technology and data Before 12 After 6

Analysers, the laboratory information system or the network stop or produce wrong output, so testing halts, results are lost or errors pass unnoticed into patient records.

Who or what is affected: Clinicians, patients and laboratory staff

Causes

Ageing equipment, software updates released without testing and network outages.

Consequences

Delayed results, lost samples, incorrect reports and clinical risk.

Existing controls

  • Analysers run daily quality control before patient testing begins.
  • The system is backed up each night to a separate location.

Control gaps

The downtime drill is paper based and has not been timed against a full restore.

Additional controls

  • Prevent: Keep a planned maintenance schedule and spare parts for each critical analyser.
  • Recover: Test the downtime procedure with manual forms and a timed restore each quarter.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Laboratory information systems lead Target: Within 60 days Early warning: Quality control failures on the same analyser within one week.
H04

Exposure to infectious and hazardous material

Safety Before 12 After 6

Staff are exposed to blood-borne or airborne pathogens, sharps injuries and chemical or biological agents during specimen handling, processing and waste disposal.

Who or what is affected: Laboratory staff, cleaners and porters

Causes

Splashes, aerosols, overfilled sharps bins and pressure to work quickly.

Consequences

Occupational infection, exposure follow up, staff absence and duties to support affected staff.

Existing controls

  • Staff are vaccinated and trained in safety cabinet use.
  • Sharps bins are placed at each bench and collected routinely.

Control gaps

Spill kits are checked inconsistently and incident reports are sometimes delayed.

Additional controls

  • Prevent: Use safety cabinets and closed systems for high-risk specimens and reagents.
  • Detect: Record and review every sharps injury and near miss within one working day.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Infection prevention lead Target: Within 30 days Early warning: Two or more sharps or splash reports from one bench within a month.
H05

Breach of confidentiality and consent for results

Legal and compliance Before 12 After 6

Results or patient details are viewed, printed or sent to people without a clinical need or valid consent, through unlocked screens, shared printers or misdirected reports.

Who or what is affected: Patients, families and clinical staff

Causes

Shared logins, rushed printing and out of date contact details for clinicians.

Consequences

Privacy harm, complaints, regulatory reporting and loss of patient trust.

Existing controls

  • Staff sign confidentiality terms and use individual logins.
  • Reports are sent only to the registered clinician or ward.

Control gaps

Access logs are kept, but nobody checks who viewed records without a clinical need.

Additional controls

  • Prevent: Lock screens automatically and keep printers in secure areas with restricted release.
  • Detect: Review access logs for records viewed outside a clinician's own patients each month.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Information governance lead Target: Within 45 days Early warning: Access log entries for records outside a clinician's own patients.
H06

Staffing shortfall and competence gaps

People Before 12 After 6

Sickness, vacancies or untrained cover reduce testing capacity and leave staff performing unfamiliar tests or releasing results without enough experience.

Who or what is affected: Patients, laboratory staff and clinicians

Causes

Vacancies, long sickness absence, reliance on temporary staff and high workload.

Consequences

Slower turnaround, errors in unfamiliar tests and staff burnout.

Existing controls

  • A weekly rota is set with named senior cover for each shift.
  • Competence records are kept for each bench procedure.

Control gaps

Competence records are not checked against the tests actually performed on each shift.

Additional controls

  • Prevent: Train and assess back up staff on critical tests before they cover shifts alone.
  • Respond: Use a pre-agreed escalation to a senior scientist when cover falls below the minimum.
Likelihood 4 x impact 3 before; 3 x 2 after Owner: Laboratory manager Target: Within 60 days Early warning: Shifts running below the minimum senior staffing level in a week.
H07

Handover and interpretation errors between shifts

Operational Before 8 After 4

Pending tests or comments are passed on informally or misread between shifts, so follow up is missed or a result is interpreted without its clinical history.

Who or what is affected: Patients, junior clinicians and laboratory staff

Causes

Verbal handovers, busy periods and unclear ownership of pending work.

Consequences

Missed follow up, repeat testing and delayed diagnosis.

Existing controls

  • Pending tests are listed on the shift handover sheet.
  • Report comments are checked by the reporting scientist before release.

Control gaps

Handover sheets are not reviewed and interpretive comments are not standardized.

Additional controls

  • Prevent: Use a structured handover template for pending and abnormal results.
  • Detect: Audit a sample of handovers each month for missed pending results.
Likelihood 2 x impact 4 before; 2 x 2 after Owner: Clinical laboratory supervisor Target: Within 45 days Early warning: Pending results that remain open beyond their expected reporting time.
H08

Reagent, consumable or supplier shortage

Supplier Before 9 After 4

A key reagent, control material or consumable fails to arrive, so tests stop, switch to a less suitable method or are delayed while stock is replaced.

Who or what is affected: Patients, clinicians and purchasing staff

Causes

Single source products, late deliveries and sudden demand increases.

Consequences

Test backlog, changed methods and delayed patient care.

Existing controls

  • Minimum stock levels are set for critical reagents.
  • Two approved suppliers are listed for the main consumables.

Control gaps

Stock levels are reviewed monthly rather than against planned testing demand.

Additional controls

  • Prevent: Hold a validated alternative reagent and agree delivery terms with a second supplier.
  • Respond: Use a written prioritization list for testing when stock runs low.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Procurement lead Target: Within 90 days Early warning: Reagent stock cover falling below the agreed number of days.

Rating method and evaluation

Each hazard is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Negligible to Catastrophic, with patient harm weighted most heavily. Multiplying the two gives a score from 1 to 25. Low runs from 1 to 4 and means accept and monitor. Medium runs from 5 to 9 and needs routine controls with a named owner. High runs from 10 to 16 and needs senior attention with a dated plan. Critical runs from 17 to 25 and needs immediate action and escalation to clinical leadership. Inherent risk is the score before any controls. Residual risk is the score after existing and added controls are in place, and it must never be higher than the inherent score. Risks that are not yet controlled are not rated down because they have not yet happened. Ratings are challenged by the staff who do the work, reviewed by the laboratory quality group, and re-scored whenever a monitoring threshold is reached or an incident occurs. Specialist review is needed before any score is used in a real service.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Critical results without a recorded acknowledgement within the set time.Escalate to the consultant pathologist at once, and to the clinical governance group if more than two occur in a month.
Specimens rejected for labelling or identification errors, counted by ward.Escalate to the laboratory quality lead when a ward exceeds the agreed rate, and to the clinical governance group after two months.
Quality control failures or analyser downtime longer than the agreed period.Escalate to the laboratory information systems lead immediately, and to the laboratory manager if testing is halted.
Sharps or splash reports from one area within a month.Escalate to the infection prevention lead within one working day, and to occupational health for any exposure.
Shifts staffed below the agreed minimum level of senior cover.Escalate to the laboratory manager at once, and to the duty director if testing capacity is reduced.

Contingency arrangements

If a serious event occurs, such as a wrong patient result, a lost specimen batch or a major analyser failure, the laboratory manager stops affected testing and secures records. The consultant pathologist reviews any result that may have caused harm and informs the treating clinician at once. The information systems lead switches to the downtime procedure and restores data from the latest tested backup. Infection prevention and occupational health are contacted for any exposure. Reagent stock moves to the agreed alternative supplier, and clinicians are told of any delay. Specialist review is needed before any clinical decision is changed.

Prioritized action plan

  1. Introduce two identifier checks at collection with routine auditing, owner laboratory quality lead, within 30 days.
  2. Publish a critical result list and an unacknowledged result escalation route, owner consultant pathologist, within 30 days.
  3. Test the downtime procedure against a timed restore, owner laboratory information systems lead, within 60 days.
  4. Restrict printing and review access logs for records viewed without clinical need, owner information governance lead, within 45 days.
  5. Add a structured handover template with a monthly audit of pending results, owner clinical laboratory supervisor, within 45 days.

Conclusion

Safe pathology depends on a few steady habits: two identifier checks at collection, a tested critical result route, a practised downtime plan, protected information and steady staffing with trained cover. The highest scores sit with specimen identity and critical result communication, and each has actions that reduce the residual score. Treat the register as a living record, review it on the stated cycle and refer any clinical, regulatory or legal question to a qualified pathologist or licensed professional.

Assumptions and limitations

Assumptions

  • The laboratory serves a hospital with inpatient and outpatient clinical services and uses automated analysers.
  • Jurisdiction is not specified, so legal and regulatory duties are described in general terms only.
  • Staff are trained healthcare scientists and technicians working under a named clinical lead.

Limitations

  • The scores are teaching examples and do not describe any real laboratory.
  • Clinical and regulatory matters need review by a qualified pathologist or licensed professional.
  • This is educational content and does not replace a formal site-specific risk assessment.

Related frameworks to study

  • Clinical governance and incident reporting cycle
  • Hierarchy of controls
  • Root cause analysis for serious incidents

Healthcare Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

More Healthcare risk assessments

Hourly Active: 35,661 Learners