vaayaa Inclusive Education
Healthcare risk assessment

Physiotherapy Assistant Operations Risk Assessment: Treatment Scope, Infection, Records and Escalation Controls

Worked risk assessment for a physiotherapy assistant role, covering treatment scope, falls, infection control, records and privacy, equipment, staffing, deterioration and consent.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: High to Medium
See the Physiotherapy Assistant Operations course

Executive summary

This assessment shows how a physiotherapy assistant role can be supported to deliver safe, lawful and well documented care. It identifies eight hazards that plausibly arise in rehabilitation work, including treatment outside scope, falls, infection spread, documentation and privacy failures, equipment faults, staffing and handover gaps, failure to escalate deterioration, and consent and scope breaches. Each hazard is scored before controls and again after existing and additional controls. Deterioration recognition and treatment scope carry high inherent scores, and most hazards fall to Low or Medium once the added controls are in place. The first actions are a current task list for each room, a structured handover, a practised stop and call routine and a dated cleaning record. Because this is a teaching example, every score illustrates method rather than describing a real clinic or patient.

Focus area
Physiotherapy assistant operations and rehabilitation support
Setting
Outpatient and community rehabilitation clinic with registered physiotherapists and support assistants
Method
Five by five likelihood and impact clinical risk register

Scope

This assessment covers the daily work of a physiotherapy assistant supporting registered physiotherapists in a rehabilitation setting, from preparing treatment rooms and equipment to exercise support, documentation, handover and escalation. It does not cover diagnosis or treatment decisions reserved for registered clinicians. Jurisdiction, funding model and clinic size are not specified and are treated as assumptions for teaching.

Context

The clinic has three physiotherapists, two assistants, a receptionist and a clinic manager. Assistants prepare rooms, set up equipment, support exercise sessions under supervision, record attendance and observations in an electronic record, and pass information at shift handover. Patients include older adults, people recovering from surgery and those with long term pain. Each hazard is scored before controls to show its natural level, then again after existing controls and the additional controls that should be added.

Objectives, assets and stakeholders

The objective is to deliver safe, lawful and respectful physiotherapy support, prevent avoidable harm, protect health information and keep staff able to work well. The assets in scope are patients and their safety, the treatment equipment and rooms, the electronic record and the trust placed in the service. Stakeholders include patients and families, assistants, supervising physiotherapists, the clinic manager, the governance and infection prevention leads, the regulator and those who commission care. Every risk has one owner role. The clinic manager keeps the register current, and the clinical governance lead reports the highest residual risks to the leadership team each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H03 H06 Likelihood 4, impact 4, score 16, high: H01
3 Possible Likelihood 3, impact 4, score 12, high: H02 H04 Likelihood 3, impact 5, score 15, high: H07
2 Unlikely Likelihood 2, impact 4, score 8, medium: H05 Likelihood 2, impact 5, score 10, high: H08
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely
3 Possible Likelihood 3, impact 2, score 6, medium: H06
2 Unlikely Likelihood 2, impact 2, score 4, low: H05 Likelihood 2, impact 3, score 6, medium: H02 H03 H04 Likelihood 2, impact 4, score 8, medium: H01 H07
1 Rare Likelihood 1, impact 4, score 4, low: H08
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Treatment delivered outside assistant scope 16 High 8 Medium Senior physiotherapist
H02 Patient fall or injury during exercise or transfer 12 High 6 Medium Clinic manager
H03 Infection spread and poor hygiene between patients 12 High 6 Medium Infection prevention lead
H04 Documentation errors and privacy breach 12 High 6 Medium Information governance lead
H05 Faulty or unsafe treatment equipment 8 Medium 4 Low Clinic manager
H06 Staffing shortfall and poor handover 12 High 6 Medium Clinical team lead
H07 Failure to recognise and escalate deterioration 15 High 8 Medium Senior physiotherapist
H08 Consent and scope of practice breach 10 High 4 Low Clinic governance lead
H01

Treatment delivered outside assistant scope

Safety Before 16 After 8

An assistant carries out or adjusts an exercise, manual handling step or electrotherapy setting without a current instruction from the treating physiotherapist, so a patient is given a treatment that was not assessed for them.

Who or what is affected: Patients, assistants and treating physiotherapists

Causes

Verbal instructions, busy sessions and unclear limits on delegated tasks.

Consequences

Patient injury, loss of trust, professional complaint and possible regulatory action.

Existing controls

  • Each treatment plan is written in the record and signed by the physiotherapist.
  • Assistants sign a list of tasks they are cleared to perform.

Control gaps

Task lists are not checked against changed plans, and verbal changes are not recorded.

Additional controls

  • Prevent: Display a current task list at each room and update it whenever a plan changes.
  • Detect: Audit a sample of sessions each month against the written plan and record any mismatch.
Likelihood 4 x impact 4 before; 2 x 4 after Owner: Senior physiotherapist Target: Within 30 days Early warning: A session note that records a task not listed in the current plan.
H02

Patient fall or injury during exercise or transfer

Safety Before 12 After 6

A patient loses balance, slips or is strained during a standing exercise, gait practice or transfer that the assistant is helping to support, particularly with older adults, dizziness or poor footwear.

Who or what is affected: Patients, assistants and visitors

Causes

Fatigue, poor lighting, wet floors and a patient whose condition changed since screening.

Consequences

Fracture, head injury, longer stay in care and a claim for harm.

Existing controls

  • Falls risk is screened at first contact and recorded.
  • Supervision ratio is set for higher risk sessions.

Control gaps

Screening is not repeated after a change in medication or condition, and near misses are not logged.

Additional controls

  • Prevent: Check footwear, mobility aids and the floor before each session and fix any hazard at once.
  • Respond: Practise a standard fall response with each assistant and review every fall within 48 hours.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Clinic manager Target: Within 45 days Early warning: Two or more near misses with the same patient or equipment in one month.
H03

Infection spread and poor hygiene between patients

Safety Before 12 After 6

Hands, shared equipment, mats and treatment couches are not cleaned between patients, or an assistant attends work with an infectious illness, so infection passes from one person to another.

Who or what is affected: Patients, staff and visiting family members

Causes

Heavy patient lists, short turnaround between sessions and unclear sickness rules.

Consequences

Outbreak in the clinic, patient harm, staff absence and closure of a room.

Existing controls

  • Hand gel is available at every treatment room door.
  • Couches are wiped with a clinic approved cleaner at the end of each day.

Control gaps

Cleaning is recorded at the end of the day only, and sickness reporting depends on memory.

Additional controls

  • Prevent: Clean and dry equipment between each patient and record the clean on the room sheet.
  • Detect: Check each shift that hand gel, wipes and bins are stocked and in use.
Likelihood 4 x impact 3 before; 2 x 3 after Owner: Infection prevention lead Target: Within 14 days Early warning: Two or more staff or patients with similar symptoms reported in one week.
H04

Documentation errors and privacy breach

Technology and data Before 12 After 6

Observations are written in the wrong record, notes are left open on a screen, or a patient name is shared in a corridor or message, so information about health is exposed or becomes inaccurate.

Who or what is affected: Patients, staff and the clinic's governance and legal leads

Causes

Shared workstations, busy desks and rushed notes written after the session.

Consequences

Privacy complaint, wrong treatment decisions and loss of patient confidence.

Existing controls

  • Each user signs in with a personal login.
  • Screens lock after a short period without use.

Control gaps

Access logs are not reviewed, and notes are often completed at the end of the day.

Additional controls

  • Prevent: Confirm patient identity with two identifiers before any record is opened or treatment starts.
  • Detect: Review access logs each month and check a sample of notes for accuracy and completeness.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Information governance lead Target: Within 30 days Early warning: A note filed to the wrong patient or a log showing access by an unassigned user.
H05

Faulty or unsafe treatment equipment

Operational Before 8 After 4

A treatment couch, electrotherapy device, weight, resistance band or hoist is worn, damaged or used past its inspection date, so it fails during use and injures the patient or assistant.

Who or what is affected: Patients, assistants and maintenance contractors

Causes

Heavy use, missed service dates and damage not reported.

Consequences

Injury, loss of a treatment room and claims for harm.

Existing controls

  • Equipment is listed on an asset register with a service date.
  • Assistants report visible damage at the start of each shift.

Control gaps

The register does not show test dates for electrical items, and damage reports are informal.

Additional controls

  • Prevent: Tag out-of-service equipment and store it away from clinical areas until it is checked.
  • Respond: Remove a failed item from use, record the incident and arrange a replacement before the next session.
Likelihood 2 x impact 4 before; 2 x 2 after Owner: Clinic manager Target: Within 30 days Early warning: Equipment past its service date or with a recurring fault in the log.
H06

Staffing shortfall and poor handover

People Before 12 After 6

Sickness or leave leaves a session without enough trained support, or a handover omits a changed plan, allergy, pain flare or consent limit, so the next team member works from incomplete information.

Who or what is affected: Patients, assistants and the treating team

Causes

Unplanned absence, rushed end of day and handover sheets that are filled in from memory.

Consequences

Missed changes, delayed treatment, patient harm and staff stress.

Existing controls

  • A rota is set a week ahead and cover is arranged for known leave.
  • A written handover sheet is used at the end of each shift.

Control gaps

Handovers are not checked for changes, and cover is arranged by phone at short notice.

Additional controls

  • Prevent: Hold a five minute structured handover for every patient with a change in the past 24 hours.
  • Respond: Keep a bank of trained cover staff and a rule for when sessions are rescheduled.
Likelihood 4 x impact 3 before; 3 x 2 after Owner: Clinical team lead Target: Within 60 days Early warning: More than one handover in a week with a missing change or allergy field.
H07

Failure to recognise and escalate deterioration

Safety Before 15 After 8

A patient becomes short of breath, dizzy, confused or unusually pale, or reports new chest, leg or neurological symptoms, and the assistant does not stop the session or contact the physiotherapist or emergency service promptly.

Who or what is affected: Patients, assistants and the treating physiotherapist

Causes

Unfamiliar symptoms, pressure to finish the session and reliance on memory of the escalation chart.

Consequences

Serious harm or death, emergency transfer and regulatory investigation.

Existing controls

  • Assistants are trained to recognise warning signs using the clinic escalation chart.
  • An emergency call point and a written escalation route are displayed in each room.

Control gaps

Warning signs are not practised, and no one checks that the escalation route is known by all staff.

Additional controls

  • Prevent: Take baseline vital signs at the start of any session where the plan lists a cardiovascular or respiratory risk.
  • Respond: Stop the session, keep the patient safe and call the named clinician or emergency service at once.
Likelihood 3 x impact 5 before; 2 x 4 after Owner: Senior physiotherapist Target: Within 14 days Early warning: A patient reports new symptoms or a session is not stopped when warning signs appear.
H08

Consent and scope of practice breach

Legal and compliance Before 10 After 4

An assistant starts a technique or discusses a treatment choice that is outside their role or the consent given, or a patient is treated without current consent recorded, so the care lacks a lawful and ethical basis.

Who or what is affected: Patients, assistants and the regulated clinicians who supervise them

Causes

Unclear limits on delegated tasks, consent forms that are not updated and pressure to help out.

Consequences

Regulatory referral, civil claim, damage to professional standing and harm to the patient.

Existing controls

  • Written consent is taken before the first treatment.
  • The scope of each assistant role is set out in the job description.

Control gaps

Consent is not rechecked when the plan changes, and role limits are not tested.

Additional controls

  • Prevent: Check consent and the current scope at the start of each new treatment type with the supervising clinician.
  • Recover: Stop the treatment, inform the supervisor and record the consent issue for review.
Likelihood 2 x impact 5 before; 1 x 4 after Owner: Clinic governance lead Target: Within 60 days Early warning: A treatment recorded without a matching current consent entry.

Rating method and evaluation

Each hazard is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Negligible to Catastrophic. Multiplying the two gives a score from 1 to 25 that falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. Inherent risk is the score before any controls, judged as if existing controls were absent. Residual risk is the score after existing controls and the additional controls, and it must never be higher than the inherent score. Impact is judged on harm to patients and staff first, then on regulatory, privacy and service consequences. A risk is never rated down only because it has not yet happened. Any residual High or Critical score needs senior clinical attention and a dated plan, Medium needs routine controls with a named owner, and Low is accepted and monitored. Ratings are challenged by the staff who do the work, by a second clinician reviewing a sample, and by any incident or near miss. A score is reviewed whenever an indicator reaches its escalation threshold.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Sessions where the written plan and the task performed do not match in the monthly audit.Escalate to the senior physiotherapist when any mismatch is found, and to the clinic manager if two occur in one month.
Falls and near misses recorded for the same patient or equipment in one month.Escalate to the clinic manager after a second event, and to the clinical governance lead for review within 48 hours.
Handover sheets missing a changed plan, allergy or consent limit.Escalate to the clinical team lead when any sheet is missing a change, and hold the next session until the detail is confirmed.
Patients with new warning signs for whom the session was not stopped.Escalate to the senior physiotherapist at once and to the clinical governance lead within 24 hours.
Equipment past its service date or with a recurring fault in the log.Escalate to the clinic manager when an item is overdue, and remove it from use until it is serviced.

Contingency arrangements

If a patient deteriorates seriously, the assistant stops the session, keeps the patient safe and calls the named clinician or emergency service. The physiotherapist takes charge, informs the family where appropriate and records the timeline. If a privacy breach or infection cluster is found, the information governance lead or infection prevention lead isolates the affected records or room, informs the clinic manager and seeks advice from the relevant regulator or public health contact as the jurisdiction requires. Cover is arranged from the trained bank, and sessions are rescheduled with clear messages to patients.

Prioritized action plan

  1. Confirm the current task list for each room and retrain assistants on scope, owner senior physiotherapist, within 30 days.
  2. Introduce a practised stop and call routine with baseline observations, owner senior physiotherapist, within 14 days.
  3. Set a cleaning record between patients and a sickness rule for staff, owner infection prevention lead, within 14 days.
  4. Install a structured handover for changed patients and keep a trained cover bank, owner clinical team lead, within 60 days.
  5. Review access logs, apply two identifier checks and confirm note timing, owner information governance lead, within 30 days.

Conclusion

Safe physiotherapy support depends on clear delegated tasks, careful handover, hygiene between patients, recognition of deterioration and honest reporting of near misses. The highest scores sit with deterioration, treatment outside scope and infection, and each has controls that reduce its residual score. Treat this register as a living record, review it every six months or after any serious event, and seek qualified clinical, legal and privacy advice for any real service decision.

Assumptions and limitations

Assumptions

  • Assistants work only under the direction and supervision of a registered physiotherapist, and delegated tasks are written down.
  • The clinic uses an electronic record and shared equipment that is serviced on a schedule.
  • Jurisdiction and professional regulator are not specified, so duties are described in general terms only.

Limitations

  • The scores are examples for learning and do not describe any real clinic or patient.
  • Clinical standards, professional scopes and privacy rules vary by location and change over time, so specialist review is needed.
  • This is educational content and does not replace a formal site specific assessment or advice from a licensed clinician.

Related frameworks to study

  • Hierarchy of controls
  • Clinical governance and incident learning cycle
  • Three lines model of risk ownership
  • Risk register with likelihood and impact scoring

Healthcare Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

Physiotherapy Assistant Operations course Read the best practices for this course

More Healthcare risk assessments

Hourly Active: 45,552 Learners