vaayaa Inclusive Education
Healthcare risk assessment

Endocrinology and Diabetes Management Risk Assessment: Medicines, Monitoring and Escalation Controls

A worked example of how a diabetes and endocrine service finds, scores and controls risks from insulin and medicine errors, hypoglycemia, device failure and weak handovers.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to Medium
See the Endocrinology and Diabetes Management course

Executive summary

This assessment shows how a diabetes and endocrine service can find, rate and control the risks that matter most to patient safety. Eight risks were chosen because they are plausible in everyday clinical, nursing and community work. Dosing errors, severe hypoglycemia and delayed recognition of deterioration carry the highest inherent scores, because a single event can cause serious harm. Each risk is scored before controls and again after existing and added controls. Most fall to Medium or Low once controls are in place, but severe hypoglycemia and ketoacidosis remain at Medium because the impact stays serious. The first actions are independent double checks for high risk insulin orders, a hypoglycemia protocol with a named lead, a structured handover tool and a tested downtime plan for devices and records. This example illustrates method only, and specialist clinical review is needed for any real service.

Focus area
Endocrinology and diabetes care
Setting
Outpatient, inpatient and community endocrine and diabetes service within a general healthcare setting
Method
Five by five likelihood and impact risk register

Scope

This assessment covers a diabetes and endocrine service that cares for adults with diabetes and hormone conditions across clinic, ward and community settings. It covers clinical deterioration, medicine and device safety, information handling, staffing, escalation and continuity. Jurisdiction, service size and local protocols are assumptions made for teaching and must be replaced by local policy.

Context

The service has an endocrinologist, diabetes specialist nurses, dietitians, pharmacists, ward and community nurses, and referrals from primary care. Patients use insulin pens, glucose meters, insulin pumps and continuous glucose sensors, and records are kept in an electronic system with paper downtime forms. Each risk is scored before controls to show its natural level, then again after existing controls and the controls that should be added. Scores are reviewed when incidents occur or indicators reach their thresholds.

Objectives, assets and stakeholders

The objective is to deliver safe, effective and timely care for people with diabetes and endocrine conditions, prevent avoidable harm, protect confidential information and keep services running during disruption. The assets in scope are patients, insulin and medicine stock, glucose meters, pumps and sensors, the electronic record, clinical protocols and the skill of the team. Stakeholders include patients and families, the endocrinologist, diabetes nurses, dietitians, pharmacists, ward and community staff, referring clinicians, the clinical governance lead and any regulator or commissioning body that applies. Every risk has one owner role, and the clinical governance lead reviews the register each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H06 Likelihood 4, impact 4, score 16, high: H01 Likelihood 4, impact 5, score 20, critical: H02
3 Possible Likelihood 3, impact 3, score 9, medium: H08 Likelihood 3, impact 4, score 12, high: H04 H05 Likelihood 3, impact 5, score 15, high: H03
2 Unlikely Likelihood 2, impact 4, score 8, medium: H07
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely
3 Possible
2 Unlikely Likelihood 2, impact 2, score 4, low: H08 Likelihood 2, impact 3, score 6, medium: H04 H05 H06 Likelihood 2, impact 4, score 8, medium: H01 H02 H03
1 Rare Likelihood 1, impact 4, score 4, low: H07
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Insulin and high risk medicine dosing error 16 High 8 Medium Clinical lead for medicines
H02 Severe hypoglycemia in hospital and community 20 Critical 8 Medium Endocrinologist
H03 Delayed recognition of diabetic ketoacidosis and deterioration 15 High 8 Medium Ward manager
H04 Glucose meter, pump or sensor failure 12 High 6 Medium Diabetes technology lead
H05 Privacy, consent and record access breach 12 High 6 Medium Information governance lead
H06 Handover gaps and competence of staff 12 High 6 Medium Clinical education lead
H07 Infection and sharps exposure during injection and testing 8 Medium 4 Low Infection prevention and control lead
H08 Insulin and test strip supply interruption 9 Medium 4 Low Chief pharmacist
H01

Insulin and high risk medicine dosing error

Safety Before 16 After 8

A wrong dose, wrong insulin type or wrong patient is prescribed, transcribed or given, because orders are unclear, pens look alike or handoffs are rushed.

Who or what is affected: Patients, nurses, prescribers and pharmacists

Causes

Look alike pens, verbal orders and interruptions during busy rounds.

Consequences

Hypoglycemia or hyperglycemia, patient harm, incident investigation and loss of trust.

Existing controls

  • Prescriptions are checked by a pharmacist before supply.
  • Insulin doses are recorded on the drug chart at administration.

Control gaps

Double checks are not applied consistently to urgent or out of hours doses.

Additional controls

  • Prevent: Use independent double checks for insulin and high risk medicine orders.
  • Detect: Audit a sample of charts each month for dose and type mismatches.
Likelihood 4 x impact 4 before; 2 x 4 after Owner: Clinical lead for medicines Target: Within 30 days Early warning: Repeated chart corrections for insulin doses on a single ward.
H02

Severe hypoglycemia in hospital and community

Safety Before 20 After 8

Glucose falls too low after insulin, sulfonylurea use, missed meals or changed activity, and treatment or recheck is delayed, risking seizure, collapse or serious harm.

Who or what is affected: Patients on insulin, care staff and family carers

Causes

Changed meal patterns, reduced kidney function, older age and dose changes made without review.

Consequences

Collapse, seizure, falls, admission and lasting neurological harm.

Existing controls

  • Patients receive written advice on hypoglycemia and its treatment.
  • Ward staff check glucose before meals and at bedtime.

Control gaps

Dose reviews are not triggered when a patient is discharged or moves between settings.

Additional controls

  • Prevent: Review insulin and sulfonylurea doses whenever intake or activity changes.
  • Respond: Use a hypoglycemia protocol with a named clinical lead and recheck timing.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Endocrinologist Target: Within 45 days Early warning: Hypoglycemia episodes below 4 mmol/L on the ward each month.
H03

Delayed recognition of diabetic ketoacidosis and deterioration

Safety Before 15 After 8

Early signs of ketoacidosis, infection or dehydration are missed or put down to other causes, so treatment starts late and the patient deteriorates.

Who or what is affected: Patients with insulin treated diabetes, nurses and doctors

Causes

Atypical presentations, weekend staffing and reliance on routine observations alone.

Consequences

Cardiac or cerebral complications, intensive care admission and death.

Existing controls

  • Ward observations include capillary glucose and fluid balance.
  • Sick day rules are given to patients who take insulin.

Control gaps

Ketone testing is not available on every ward, and sick day advice is not reviewed.

Additional controls

  • Detect: Trigger an early warning score review when ketone or glucose readings exceed agreed limits.
  • Recover: Confirm the escalation route and out of hours contact for each unit.
Likelihood 3 x impact 5 before; 2 x 4 after Owner: Ward manager Target: Within 45 days Early warning: Ketone readings above the agreed limit with no documented medical review within one hour.
H04

Glucose meter, pump or sensor failure

Technology and data Before 12 After 6

Devices give inaccurate readings, lose connection or fail during use, so insulin is dosed on wrong data or monitoring stops without anyone noticing.

Who or what is affected: Patients using devices, clinicians and device support staff

Causes

Batch faults, low batteries, poor sensor placement and expired test strips.

Consequences

Wrong insulin dose, missed alarms, hypoglycemia or hyperglycemia.

Existing controls

  • Meters are checked against laboratory glucose when readings look unexpected.
  • Pump settings are recorded in the patient file at each review.

Control gaps

Device serial numbers and calibration dates are not recorded centrally.

Additional controls

  • Detect: Flag sensor alarms and missing data to the diabetes team each day.
  • Respond: Keep a backup meter and written dosing guidance for device failure.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Diabetes technology lead Target: Within 60 days Early warning: Repeated sensor or meter errors recorded for the same patient or device batch.
H05

Privacy, consent and record access breach

Legal and compliance Before 12 After 6

Glucose records, pump data or messages are shared with people not entitled to them, or treatment changes start without informed consent, damaging trust and breaking rules.

Who or what is affected: Patients, families, staff and the information governance team

Causes

Shared screens in clinics, messages sent to personal phones and informal messaging between staff.

Consequences

Loss of confidence, complaints, regulatory review and distress to the patient.

Existing controls

  • Staff use individual log ins and lock screens when away from a terminal.
  • Consent for treatment changes is recorded in the clinical notes.

Control gaps

Access logs are not reviewed, and messaging tools are not covered by written policy.

Additional controls

  • Respond: Notify the information governance lead and contain any inappropriate access at once.
  • Recover: Review consent records and correct documentation after any breach.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Information governance lead Target: Within 90 days Early warning: Access or disclosure requests for records that lack a documented reason.
H06

Handover gaps and competence of staff

People Before 12 After 6

Insulin plans, pending results or hypoglycemia risks are left out of ward or clinic handovers, and newer staff act on insulin decisions without the training needed.

Who or what is affected: Patients, nurses, junior doctors and agency staff

Causes

Staff turnover, agency use, busy shifts and reliance on memory rather than written plans.

Consequences

Missed doses, delayed treatment, incidents and a weaker team.

Existing controls

  • Ward handovers take place at each shift change.
  • Diabetes training is offered to newly registered nurses.

Control gaps

Competency sign off is not repeated when a nurse moves to a new ward.

Additional controls

  • Prevent: Use a structured handover tool that lists insulin plans and hypoglycemia risks.
  • Detect: Audit handover records and competency sign-offs each quarter.
Likelihood 4 x impact 3 before; 2 x 3 after Owner: Clinical education lead Target: Within 60 days Early warning: Handover records missing the insulin plan or hypoglycemia risk for a patient.
H07

Infection and sharps exposure during injection and testing

Safety Before 8 After 4

Pens, needles, lancets and cannulas are shared, reused or handled unsafely, so patients and staff face blood borne infection or needle stick injury.

Who or what is affected: Patients, nurses, healthcare assistants and cleaning staff

Causes

Pressure on supplies, unlabeled devices and rushed injections.

Consequences

Infection, needle stick injury, sickness absence and distress.

Existing controls

  • Single use lancets and needles are supplied for every patient.
  • Sharps bins are placed at each bedside and treatment room.

Control gaps

Audits of injection practice are not carried out in community settings.

Additional controls

  • Prevent: Ban shared insulin pens and label every device with a single patient name.
  • Respond: Follow a post exposure route with occupational health referral within the same shift.
Likelihood 2 x impact 4 before; 1 x 4 after Owner: Infection prevention and control lead Target: Within 30 days Early warning: Overfilled sharps bins or unlabeled insulin pens found on routine audit.
H08

Insulin and test strip supply interruption

Supplier Before 9 After 4

Supply of insulin, glucose strips, pump consumables or key medicines stops, so patients run short or switch to unfamiliar products without support.

Who or what is affected: Patients, pharmacists, prescribing teams and suppliers

Causes

Single source suppliers, wider shortages in the market and delays in ordering.

Consequences

Rationing, unsafe substitution, missed doses and avoidable admissions.

Existing controls

  • Pharmacy keeps a minimum stock level for key insulins.
  • Repeat prescriptions are reviewed before they are issued.

Control gaps

Substitution advice is not written for pump and sensor consumables.

Additional controls

  • Recover: Agree a substitution protocol and contact list with pharmacy for shortages.
  • Detect: Check stock levels weekly and report any product on short supply.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Chief pharmacist Target: Within 60 days Early warning: Stock of a key insulin or test strip falls below the minimum level.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Insignificant to Catastrophic, with harm to a patient judged on clinical severity, reversibility and the number of people affected. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. Inherent risk is the score before any controls. Residual risk is the score after existing and added controls are in place and working. A residual score is never higher than the inherent score, and any risk that stays High needs senior clinical attention and a dated plan. Anything Medium needs routine controls with a named owner, and anything Low is accepted and watched. Ratings are challenged by the frontline team at the monthly safety huddle, by patient feedback and by incident reviews, and any rating is revised when an indicator reaches its threshold. The scores are a guide for ordering work, not a measure of clinical outcome.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Dosing errors or near misses involving insulin or high risk medicines in the month.Escalate to the clinical lead for medicines when any error reaches a patient, and to the clinical governance lead if two occur in one month.
Hypoglycemia episodes below 4 mmol/L requiring treatment on the ward each month.Escalate to the endocrinologist when a patient has two episodes in one week, and to the clinical governance lead for any severe episode.
Handover records missing a required element at ward or clinic transfer.Escalate to the ward manager when more than one in ten records is incomplete in a week, and to the matron if the pattern continues.
Device or records downtime lasting longer than the agreed recovery time.Escalate to the diabetes technology lead at once, and to the service director if the outage exceeds the recovery time.
Access or disclosure requests for records that lack a documented reason.Escalate to the information governance lead within one working day, and to the data protection officer if a breach is confirmed.

Contingency arrangements

If a serious event occurs, such as severe hypoglycemia with loss of consciousness, a confirmed dosing error or a device or records outage affecting care, the clinician in charge follows the local emergency protocol first. The service lead pauses the affected process, informs the clinical governance lead and records the event in the incident system. Paper downtime forms are used for doses and observations until systems return, and a second clinician checks every dose. Patients and families are told what happened early and plainly, and any reportable event goes through the local route with specialist review.

Prioritized action plan

  1. Introduce independent double checks for insulin and high risk medicine orders, owner clinical lead for medicines, within 30 days.
  2. Publish a hypoglycemia protocol with a named clinical lead and a glucose recheck schedule, owner endocrinologist, within 45 days.
  3. Adopt a structured handover tool for every ward and clinic transfer, owner ward manager, within 60 days.
  4. Test a downtime plan for glucose meters, pumps and the electronic record, owner diabetes technology lead, within 60 days.
  5. Review consent, record access and messaging practice against local policy, owner information governance lead, within 90 days.

Conclusion

Safe diabetes and endocrine care depends on a few steady habits: independent checks on high risk medicines, a clear hypoglycemia protocol, structured handovers, protected records and tested downtime plans. The highest scores sit with dosing errors, severe hypoglycemia and delayed recognition of deterioration, and each has controls that bring the residual score down. Treat the register as a living record, review it on the stated cycle and bring concerns to clinical governance early. Seek qualified clinical and legal advice for any real decision.

Assumptions and limitations

Assumptions

  • The service follows local clinical protocols and a recognized national diabetes care approach, which are not named here.
  • Staff are registered clinicians and trained support workers using managed devices and an electronic record.
  • Jurisdiction and service size are not specified, so legal duties are described in general terms only.

Limitations

  • Scores are examples for learning and do not describe any real patient group or service.
  • Clinical practice and privacy rules differ by setting and change over time, so specialist review is needed.
  • This is educational content and is not clinical, legal or medical advice.

Related frameworks to study

  • Clinical risk management cycle of identify, assess, control and review
  • Hierarchy of controls
  • Three lines model of risk ownership
  • Structured handover approach
  • Incident learning cycle with root cause analysis

Healthcare Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

More Healthcare risk assessments

Hourly Active: 45,552 Learners