Risk Assessment Configuration

Critical Step: Defining a robust risk assessment model is the foundation of effective incident management. It ensures that every reported incident is automatically assigned a severity score (SAC or Matrix), helping your team prioritize critical issues immediately.

Severity Assessment Code (SAC)

Locked Settings: The primary Risk Assessment Type (SAC vs Matrix) is selected during onboarding and cannot be changed once the account is active. This ensures data consistency across all historical reports.

Risk Assessment Settings Locked

Overview

The Risk Assessment module allows you to define the grid used to calculate incident severity. This involves three key components:

Parameters: The axes of your matrix (e.g., Severity and Probability).
Scoring Logic: The logic that combines these parameters to produce a score (SAC 1-4).
Incident Category Groups: Distinct configurations for different category groups (e.g., Clinical, Non-clinical).

Risk Assessment Overview

Configure Parameters

You can customize the levels for both Severity and Probability to match your organization’s terminology.

Severity: Defines the impact of the incident (e.g., from Minimum to Critical).
Probability: Defines the likelihood of recurrence (e.g., from Rare to Frequent).

Managing Parameters

Add: Click + Add Parameter to introduce a new level.
Reorder: Drag and drop rows to change the sequence (e.g., moving “Critical” to the top).
Status: Toggle parameters to Active or Inactive.

Configure Scores

After defining parameters, you must assign specific scores to each Severity + Probability combination.

Category Groups: You can define different scoring rules for different contexts by switching tabs (e.g., Clinical vs Non-clinical). This allows you to have a stricter risk model for patient safety incidents compared to workplace hazards.

Configure Scores List View

How to Assign Scores

Navigate to the Configure Score tab.
Review the list of all possible combinations (e.g., Minimum Severity + Rare Probability).
Click the Edit (Pencil) icon to assign a score (e.g., 1, 2, 3, or 4).
Repeat this for all Category Groups (Clinical, Non-clinical, etc.).

Configure Outcomes

The final step is to define what each score means for your organization. This includes the label, color code, and description.

Configure Outcome List

Defining Outcomes

Go to the Configure Outcome tab.
Click the Edit (Pencil) icon to define outcomes.
Outcome Label: specific the display name (e.g., “Critical Risk” or “SAC 1”).
Color: Assign a visual indicator (Red, Orange, Yellow, Green).
Description: Detailed explanation of the risk level (e.g., “Immediate investigation required”).

Edit Outcome Modal

Preview Configuration

Once customized, click the Preview button at the top-right to see the fully rendered Risk Matrix. This view confirms how Facility QMs will see the risk grid when reviewing incidents.

SAC Matrix Preview

Risk Assessment Matrix

Risk Assessment Settings Locked

Before You Start

Access level required: Account Admin access
Impact: Changes affect how incidents are scored moving forward

Any changes made to the Risk configuration will automatically reflect across all associated facilities.

Overview

The Risk Assessment module allows you to define the grid used to calculate incident Risk Score and Outcomes. This involves four key components:

Frequency: Defines how often an incident is likely to occur (e.g., Frequent, Likely, Rare).
Consequence Categories: Defines the type and impact of harm resulting from an incident (e.g., patient safety, operational, financial, reputational). These categories determine the scope and seriousness of impact.
Scores: Assigns numeric values to each level of Frequency and Consequence. These scores are used to calculate the overall risk rating. (e.g., 1-3).
Outcome: Maps the calculated score to a final risk classification (e.g., Low, Moderate, High).

Steps

Navigate to Risk Assessment Matrix

Go to Admin → Risk Assessment → Matrix.

Why: This is where system-wide scoring logic is defined.

Expected result: You see the list of pre-configured matrix parameters.

Risk Assessment Matrix configuration screen.

Locate the Parameters section.

Typical parameters include:

Confirm naming consistency.
Verify parameter structure aligns with your risk governance framework.
Mapping of the Risk scores and outcome

Risk Assessment - Matrix - Frequency

List of Frequency - how often an incident is likely to occur (e.g., Frequent, Likely, Rare)

Validate the Frequency Parameter:

Labels are clearly defined (e.g., Frequent, Likely, Rare)
Sequence in which the Frequency should be displayed

Correct Parameter name and sequence scoring ensures consistent calculation and risk categorization.

core grid used to calculate overall risk.

Risk Assessment - Matrix - Consequence Categories

A grid that displays the type and impact of harm resulting from an incident (e.g., patient safety, operational, financial, reputational). These categories determine the scope and seriousness of impact.

Validate and configure the category level and description:

Each Consequence Category must be configured with clearly defined impact levels to ensure consistent risk assessment across incidents.
For every category, define the following five standardized levels:
- Insignificant (1)
- Minor (2)
- Moderate (3)
- Major (4)
- Catastrophic (5)

Accurate scoring ensures consistent calculation and risk categorization

core grid used to calculate overall risk.

Risk Assessment - SAC - Scores

Matrix outcomes define how risk score combinations translate into final risk categories (e.g., Low, Moderate, Extreme).

A matrix grid mapping score combinations to outcomes.

Verify:

Color coding (if enabled)
Risk labels (Low / Medium / High / Extreme)
Logical progression across the matrix

Outcomes determine dashboard indicators and escalation triggers.

Outcome mapping based on score combinations.

Risk Assessment - Matrix - Outcomes

Add or Update the Risk outcomes to adjust how combined parameter scores translate into risk categories.

In the Outcomes grid, click the cell corresponding to the score combination you want to update. Or click +Add Range to add a new Outcome that is not preconfiguered.

Select a matrix cell to modify its outcome.

Ensure:

Escalation logic remains aligned
Regulatory thresholds are preserved

Risk configuration must be completed during account setup, before users begin applying risk scores in the Incident workflow. This ensures consistent and accurate risk evaluation from day one.

Any new Changes affect new risk calculations.
Existing incidents retain historical classification unless recalculated.

Changing outcomes may affect automated notifications, dashboards, and compliance reporting.