Risk Management Policy
Risk Management Policy
Department: HSE
Document Identifier: DHCR/PP/HSE/004/01
Policy and Procedure – DHCR HSE Risk Management Policy
INTRODUCTION
This Risk Management (“RM”) policy has been prepared by DHCR HSE, and provides a clear policy on
Risk Management Procedures.
1- Purpose:
1.1 Engaging in pro-active risk management activity, in addition to the process of assessing risk, will
enable the early identification of many things that can go wrong as part of a systematic approach
to risk assessment.
The Risk Management Programme employs a number of systems to identify potential risks.
Research indicates that incidents are rarely due to individual failures but are usually associated
with systems failures.
The purpose of this policy is to provide guidance to effectively identify and manage risk in
conjunction with DHCR HSE procedures.
1.1 DHCC is committed to the continuous improvement of its risk management systems and
has a positive and supportive approach to the management of healthcare risks.
1.2 Implementation of systems where possible to prevent harm and conduct activities in
such a way as to ensure that all on campus are not exposed to unnecessary hazards through
the provision and maintenance of equipment and premises which are safe and without
unnecessary risks to health and safety.
1.3 Ensure that any premises under the control of the Business Partners /
Investors are maintained in a condition that is safe, and without unnecessary risks to
health and safety.
1.4 Business Partners / Investors are will incorporate in policies, procedures and guidelines
the practical guidance given in best practice methods, which are relevant to any work of
the organisation. In addition, where no “Best Practice Method” exists, the organisation will
compile and apply its own policies, procedures and guidelines, appropriate to specific
activities, in order to control the risks to patients, employees and others and provide for
the protection and avoidance of damage to the environment.
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 1 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
1.5 Compliance with all Federal Law, Local Orders, Regulations and International best practice
relevant to the Hospitals activities.
1.6 Business Partners / Investors are will carry out and act appropriately on risk
assessments of current work practice methods, premises, plant, and equipment, to ensure
risks are efficiently managed.
1.7 Will actively promote and encourage the involvement of employees in the
organisations risk management practices and procedures.
1.8 Will provide such information, instruction, training and supervision as is necessary, to
ensure that risk management is an integral part of every employees work, and to ensure
that this policy is efficiently implemented.
1.9 Ensure that risk management matters are effectively addressed at all levels.
1.10 Provide information on risks and the appropriate protective and preventative
Measures.
2- Scope of application:
2.1 To demonstrate how to assess risk and establish a common approach for risk management
with the following objectives:
2.1.1 Ensure as far as is reasonable practicable there is a program for risk assessment
2.1.2 Identify the hazards and risks in respect of the work activity
2.1.3 Provide a program for performance and the development of risk elimination
3- Applicable To:
3.1 This policy applies to all, staff operating and applicable to all property (buildings owned or
occupied) and premises including residential accommodation, and businesses) within the DHCC
campus.
3.2 3.1.1 Every Business Partner and their staff including all contractors staff should
adhere strict adherence to this DHCR Risk Management Policy
3.1.2 All new staff shall be oriented on the Risk Management Policy as part of general
staff orientation program
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 2 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
3.1.3 It should be understood that the onus on all operating / working in DHCC to
demonstrate compliance with the DHCC Regulatory Division Risk Management
Policy
4- Policy:
4.1 Policy
It is the objective of all Business Partners / Investors to effectively manage all risks who may be
affected by the organization’s activities through the implementation of a risk management
system that will pay due attention to efficient:
4.1.1 Identification of hazards
4.1.2 Assessment of risks associated with these hazards
4.1.3 Development and implementation of control measures to eliminate
these hazards or to reduce risks to acceptable levels
4.1.4 Evaluation to ensure that controls are effective, and monitoring of the
ongoing change situation
4.1.5 Minimization of harm caused by adverse incidents
4.1.6 Incident reporting and investigation
4.1.7 Claims management
PROCEDURE SEQUENCE
5.15.1What is a Risk Assessment
Each BP/Inv has a responsibility to ensure that there is a clear and appropriate
management structure that enables risk to be identified at High Level and at operating Management
Level and decisions to eliminate Harm are taken at an appropriate level.
The management of each BP/Inv will understand the risks associated with achieving its objectives
and will actively reassess and monitor them. Progress against action plans and the residual risks will
be an ongoing program.
Risks will be identified from risk assessments (reference to Appendix 6.1: Template Risk
Assessments).
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 3 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
The risk management process is the systematic application of management policies, procedures and
practices that determine the approach for communicating, identifying, assessing, monitoring and
reviewing risks. This is a step-by-step approach that leads the user through from assessment of the
activities they undertake, identification of risks through to the incident reporting process. The aim of
risk assessment is to identify potential sources of harm and loss and put in place adequate controls
or preventive measures before they result in an accident or illness. The key stages of Hazard
Identification and Risk Assessment Survey are as follows:
Each risk should be allocated to a risk owner/s that is responsible for acting appropriate action to
minimize its impact/consequence.
Prior to commencing a Risk Assessment, an inventory of all work activities, processes, equipment and
machines used must be prepared for each work area or location being assessed. It is vital to include
infrequent maintenance tasks as well as more routine day-to-day work.
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 4 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
For each activity, material, equipment and machine, the hazards must be identified. A hazard
checklist should be drawn up, taking into account the nature of work activities and locations where
work is carried out
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 5 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
Risk analysis is about developing an understanding of the risks identified. In subjecting a risk to
analysis it is essential that account is taken of the existing must be recorded as, control measures.
These include all measures put in place to eliminate or reduce the risk and may include;
All controls to minimize the risk that are currently in place should be listed on the risk assessment
form. When listed, time should be taken to consider their adequacy (i.e. identify weaknesses in
existing procedures and opportunities for error), method of implementation and level of
effectiveness in minimizing the identified risk to the lowest reasonably practical level. It should
be noted that management should not assume that the controls which rely on people following
correct procedures will always work.
The risk associated with each hazard must then be assessed by determining who might be harmed
and how. The assessment should evaluate the potential for harm and its consequences.
Consideration should be given to the number of persons exposed to the hazard, the frequency and
duration of exposure to the hazard, potential failure modes and routes of exposure.
The consequences of harm could range from slight injury or illness to lacerations, fractures,
amputations, chronic pain, poisoning, cancer or fatal injuries.
Risk depends on many, often related, circumstances:
Is anyone exposed to the hazard?
Is the hazard likely to cause injury?
How serious would the injury be?
Is the hazard well controlled?
Is the level of supervision adequate?
How long are people exposed?
What are the levels of exposure that should not be exceeded?
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 6 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
Avoiding
Transferring
Controlling
After assessing risks, it should be estimated that how likely it is that a hazard will cause harm and
how serious that harm is likely to be. This will help in prioritizing different risks as high, medium or
low and in deciding on the appropriate level of management effort and resources that will be
required to control each hazard. It will also help to decide how urgent any corrective measure needs
to be.
5.85.5 How are Risks are prioritized on the basis of their Risk Factor
Risk Factor = Likelihood x Severity
Rating of Likelihood:
Possible
Could occur at some time.
More than once in 5 years but no more than once 3
a year.
Almost Certain
Almost certain to occur in most circumstances. 5
Happen once or more in a month.
Rating of Severity:
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 7 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
Moderate
Significant reversible injury. Overnight
hospitalization (inpatient). 3
Moderate process loss or facility damage
Chemical release triggering external reporting
requirements.
Major
Extensive permanent injury/illness (eg. loss of
fingers/toes), extended hospitalization. 4
Catastrophic
Major process loss or facility damage 5
Chemical release with temporary environmental or
public health impact.
Each risk should be allocated to a risk owner/s that is responsible for acting appropriate action to
minimize its impact/consequence.
Prior to commencing a Risk Assessment, an inventory of all work activities, processes, equipment and
machines used must be prepared for each work area or location being assessed. It is vital to include
infrequent maintenance tasks as well as more routine day-to-day work.
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 8 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
The lowest risks are those in the GREEN boxes, which suggest the risk has been controlled to its lowest possible
level.
The risks located in the AMBER boxes suggest that controls are adequate, but ongoing monitoring is required.
Those risks located in the RED boxes are classified as key risks and should receive early management attention
and ongoing monitoring.
6 to 15 Medium
16 to 24 High
25 Extreme
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 9 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
The level of the risk is so low that specific treatment is not appropriate within available resources
The risk is such that no treatment option is available. E.g. dependent on external factors such as
government policy
The opportunity presented outweighs the treats to such a degree that the risk is justified.
Steps 1-3 (refer to 5.1.3 Evaluate the Risks) above conclude the Risk Assessment process, it is
however essential that in terms of managing assessed risks that the treatment (Action) plan is put in
place against those risks that have been evaluated as requiring treatment.
5.10 What each Risk Rating Colour Score means by way of Harm
5.13
Low Risk Minor Risk High Risk
(GREEN) (AMBER) (RED) (to Incl.
Sentinel event)
5.11 What each Risk Rating Colour Score means by of Organisation Acceptability
5.14
Assessment Description
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 10 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
Best practice states that controls must be examined in the following order, in order to access its
effectiveness.
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 11 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
Once the hazards have been identified and the associated risks assessed, action should be taken
reduce the risks so that the working conditions are improved. The most effective ways of reducing
risks are given below in order of preference
5.13.1 Elimination
5.13.2 Substitution
5.13.3 Isolation
5.13.4 Engineering
5.13.5 Administrative
5.13.6 Standard operating procedures
5.13.7 Personal Protective Equipment
5.13.1 Elimination of hazard is on the top of hierarchy of control measures. The ideal
Elimination solution is to get rid of the hazard completely. This is the most effective control
measure and should always be considered first i.e. remove/avoid the risk from the
activity, process, area etc.
5.13.2 Substituting with an alternate, that is capable of performing the same task but is
Substitution safer to use, can effectively reduce the risk. For example, substituting
glutaraldehyde disinfectant with a less toxic ortho-Phthalaldehyde disinfectant.
Therefore, replacement of dangerous articles, substances or systems of work by
less dangerous articles, substances or systems of work.
5.13.3 Isolation - Restrict access to areas, processes that represent a significant risk of
Isolation injury to authorized persons.
5.13.4 Engineering controls include using machine guards, enclosure of hazards, local
Engineer exhaust ventilation, mechanical handling methods or protective physical barriers.
However, where hazards cannot be reduced it may be necessary to
develop/purchase appropriate equipment in order to minimize the risk.
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 12 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 13 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 14 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
5- Appendix
5.1 Risk Assessment Template
5.2 Risk Assessment Register
☐ Awareness
Training
Other specify
7- Definitions:
Accident: An accident is an unplanned event resulting in death, or resulting in an
injury such as a severe sprain or strain (for example, manual handling
injuries), a laceration, a broken bone, concussion or unconsciousness
Adverse Event: An adverse event is defined as an unexpected, undesirable, or potentially
dangerous occurrence
Dangerous (Below is not an exhaustive list)
Occurrence: dangerous occurrence’ means an occurrence arising from work activities in
a place of work that causes or results in –
(a) the collapse, failure, explosion, bursting, electrical short circuit
discharge or overload, or malfunction of any work equipment,
(b) the collapse or partial collapse of any structure under construction or in
use as a place of work,
(c) the uncontrolled or accidental release, the escape of any chemical, fume,
gas or the ignition of any substance,
(d) a fire involving any substance, or
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 15 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 16 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
Risk Rating: The risk rating is determined by a combination of the likelihood and
impact the risk
Risk Register: is a log of risks that threaten an organization’s success in achieving its
declared aims and objectives. It is a dynamic living document, which is
populated through the organization’s risk assessment and evaluation
process. This enables risk to be assessed and rated. It provides a structure
for collating information about risks that helps both in the analysis of risks
and in decisions about whether or how those risks should be treated.
Sentinel Event: A sentinel event is defined as, but not limited to: An unexpected occurrence
involving: unanticipated death; or Major permanent loss of function or
major injury; or serious psychological injury
8- References :
8.1 DHA Health Care Standards – April 2012
8.2 Joint Commission International Accreditation Standards for Hospitals, 6th ed, 2016
8.3 Local Order 11 of 2013 Concerning Public Health & Community Safety in the Emirate of Dubai
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 17 / 18
Policy and Procedure – DHCR HSE Risk Management Policy
Revision History
Identifier: DHCR/PP/HSE/004/01 Issue Date 19/4/2018 Effective Date: 24/4/2018 Revision Date: 19/4/2020 Page Nu: 18 / 18