LAB-QM-009 — Risk Management Policy

1.0 Purpose

This policy establishes a systematic, risk-based approach for identifying, assessing, controlling, monitoring, communicating, and reviewing risks across all clinical laboratory services at Tarangnan Community Hospital (TCH).

It integrates proactive risk management into routine operations, equipment maintenance, examination procedures, and decision-making to safeguard patient safety, protect laboratory personnel, ensure regulatory compliance, and support the continual improvement of the Quality Management System (QMS).

2.0 Scope

This policy applies to all Medical Technologists and Laboratory Aides across all sections of the TCH Clinical Laboratory. It encompasses risk management across governance, pre-examination, examination, and post-examination processes, point-of-care testing (POCT), laboratory personnel, equipment, reagents, information management, facilities, referral testing to Samar Provincial Hospital, and biological safety hazards (including laboratory-acquired infections, biological spills, and sharps exposures).

3.0 Definitions

• Risk — the effect of uncertainty on objectives; in the laboratory context, the combination of the likelihood of occurrence of a hazardous event or exposure and the severity of harm that can result.
• Risk Management — coordinated activities to direct and control the laboratory with regard to identifying, assessing, mitigating, and monitoring risk.
• Risk Assessment — the overall process of risk identification, risk analysis, and risk evaluation.
• Risk Treatment — the systematic process of selecting and implementing control measures to eliminate, reduce, mitigate, or accept risk.
• Residual Risk — the level of risk remaining after risk treatment controls have been implemented.
• Biorisk — the risk associated with biological materials and infectious agents, including laboratory-acquired infections, biohazard spills, and sharps injuries.

4.0 Responsibility

4.1 Hospital Director

• Approves this policy and provides administrative and financial resources necessary to implement laboratory risk controls and biosafety measures.
• Reviews significant risks escalated from the laboratory during Management Review.

4.2 Pathologist

• Provides clinical oversight on risks directly affecting examination accuracy, critical result reporting, and patient safety.
• Reviews and approves risk assessment evaluations and treatment plans with high clinical impact.

4.3 Chief Medical Technologist / Laboratory Quality Manager

• Maintains the Laboratory Risk Register, Assessment, and Treatment Plan (F-QM-009-A-V0) and coordinates laboratory-wide risk assessments.
• Integrates risk assessments into equipment acquisitions, method validations, workflow changes, and quality improvement activities.
• Monitors the implementation and effectiveness of risk control measures and reports risk profiles during annual Management Review.

4.4 Medical Technologists

• Identify and report technical hazards, operational vulnerabilities, and near-misses in routine bench work.
• Implement assigned risk control measures, standard operating procedures, and biosafety protocols.
• Participate in periodic risk assessments and evaluate residual risk within their testing areas.

4.5 Laboratory Aides

• Identify and immediately report physical hazards, biohazard spills, equipment anomalies, or facility risks observed in specimen reception and work areas.
• Comply with laboratory biosafety, waste segregation, and personal protective equipment (PPE) requirements.
• Laboratory Aides do not perform, verify, interpret, or release laboratory examinations or results.

5.0 Policy / Procedure

5.1 Policy Statement & Principles

• Systematic Risk Management: The Clinical Laboratory shall establish, implement, and maintain a proactive Risk Management System that identifies and mitigates risks to patients, staff, and operations before adverse events occur.
• Patient-Safety and Quality Focus: Protection of patient safety and result accuracy shall be the primary consideration in all risk evaluations and control implementations.
• Evidence-Based and Integrated: Risk assessments shall be grounded in objective data (IQC/EQA performance, occurrence trends, audit findings, customer feedback, and equipment logs) and integrated into all daily laboratory operations rather than managed as an isolated activity.
• Proportionality: The depth of assessment and intensity of risk controls shall be proportionate to the likelihood of occurrence and severity of potential harm.

5.2 Risk Domains & Sources of Risk

The laboratory shall evaluate risks arising across six operational domains:

• Organizational & Governance: Staffing levels, competency gaps, delegation, and resource constraints.
• Pre-Examination & Phlebotomy: Patient misidentification, specimen labeling errors, hemolysis, uncentrifuged delays, and inappropriate specimen transport.
• Analytical & Equipment: Analyzer breakdowns (e.g., HORIBA Pentra XLR, chemistry analyzer), expired reagents, calibration drift, water quality fluctuations, and IQC/EQA failures.
• Post-Analytical & LIS: Transcription errors in the Excel-integrated LIS, delayed critical value reporting, and amended reports.
• Biosafety & Environmental (Biorisk): Sharps injuries, biohazard spills, laboratory-acquired infections, chemical exposures, electrical hazards, air conditioning failures, and typhoon/flood disruptions.
• External & Referral: Samar Provincial Hospital referral delays, specimen transit integrity, utility outages, and vendor supply chain interruptions.

5.3 Risk Identification

• Proactive Identification: The Chief Medical Technologist / Laboratory Quality Manager and Medical Technologists shall proactively identify hazards and vulnerabilities using routine operational logs, process observations, and staff suggestions.
• Event-Driven Triggers: Risk assessments shall be reviewed immediately upon: - Commissioning new equipment or analytical methods; - Significant modifications to laboratory workflow, facilities, or LIS software; - Trends in occurrences or near-misses reported under Occurrence Management Policy; - Root-cause analysis findings from CAPA under Corrective and Preventive Action Policy; - Nonconformities identified during internal audits under Internal Audit.
• Documentation: All identified risks shall be documented in the Laboratory Risk Register (F-QM-009-A-V0).

5.4 Risk Analysis, Evaluation, and Prioritization

• Risk Scoring: Each identified risk shall be analyzed by evaluating its Likelihood of occurrence (Low, Medium, High) and Severity of impact (Low, Medium, High) on patient safety, staff health, and service continuity:

• Prioritization and Action Levels: - Critical / High Risk: Unacceptable. Requires immediate intervention, implementation of preventive barriers, and notification of the Pathologist and Hospital Director. - Medium Risk: Tolerable with active controls. Action plan required with defined monitoring frequency. - Low Risk: Acceptable. Routine monitoring under standard operating procedures.

5.5 Risk Treatment and Residual Risk Evaluation

• Hierarchy of Control Measures: Risk treatment shall prioritize controls in order of effectiveness: - Elimination of the hazardous process or material; - Engineering controls (e.g., biological safety cabinets, centrifuge safety buckets, automatic pipette dispensers); - Administrative controls (e.g., strict two-identifier verification protocols, standard operating procedures, dual verification of critical entries); - Personal Protective Equipment (PPE) (e.g., gloves, laboratory coats, face shields).
• Action Planning: Each risk treatment plan shall designate a responsible person, specific implementation steps, target completion date, and required budget or materials in F-QM-009-A-V0.
• Residual Risk Evaluation: Following implementation of control measures, the Chief Medical Technologist / Laboratory Quality Manager shall reassess the risk. If residual risk remains unacceptable, additional controls shall be applied or the activity suspended until authorized by the Pathologist and Hospital Director.

5.6 Risk Communication, Monitoring, and Management Review

• Internal Communication: Risk assessments, newly identified hazards, and updated preventive controls shall be communicated to all Medical Technologists and Laboratory Aides during monthly staff meetings and documented via internal memoranda.
• Ongoing Monitoring: Risk controls shall be monitored continuously through Internal Quality Control (IQC), external quality assessment (EQAS), equipment preventative maintenance, and quality indicator tracking per Continual Improvement and Performance Improvement Program Policy.
• Annual Management Review: The Chief Medical Technologist / Laboratory Quality Manager shall present the updated Risk Register and treatment effectiveness summary to the Hospital Director and Pathologist during the annual Management Review per Management Review.

6.0 Records

All records generated under this policy, including risk assessments, risk treatment plans, residual risk evaluations, and risk review minutes, shall be controlled in accordance with Control of Records and retained per Laboratory Retention Schedule Policy.

7.0 References

• DOH-Philippines QMS Tool, Section 1 — Management and Organization; Section 5 — Quality Improvement Activities; Section 7 — Safety and Environment
• DOH Administrative Order No. 2021-0037, Annex A — General Guidelines (Section V.A.3 & Section VIII.E); Annex B1 — Technical Standards for Clinical Laboratories
• ISO 15189:2022, Clause 5.6 — Risk management; Clause 7.1 — General requirements; Clause 8.5 — Actions to address risks and opportunities for improvement
• WHO LQMS Handbook, Chapter 15 — Process Improvement

Companion policies:

• Continual Improvement and Performance Improvement Program Policy — integration of risk assessment with continual improvement and quality indicators
• Occurrence Management Policy — investigation of occurrences and adverse events as risk identification triggers
• Corrective and Preventive Action Policy — root cause analysis and corrective/preventive action for identified operational risks

Controlled visual annex:

• IG-10 — Risk Matrix — one-page visual annex to this policy, controlled under Document Control Policy Section 5.2.6 and registered in F-QM-002-B-V0. Master files: infographics/IG-10-Risk-Matrix-LAB-QM-009.png (PNG, print PDF, and editable HTML).