Professional Documents
Culture Documents
Root cause analysis is perhaps the most widely used tool in healthcare risk management, but does it actually lead to successful risk
control? Are there categories of risk control that are more likely to
be effective? And do healthcare risk managers have the tools they
need to support the risk control process? This systematic review
examines how the healthcare sector translates risk analysis to risk
control action plans and examines how to do better. It suggests that
the hierarchy of risk controls should inform risk control action planning and that new tools should be developed to improve the risk
control process.
I N TR O D U C TI O N
Root cause analysis (RCA) is a widely used approach to learning from patient
safety incidents and near misses. In the United States, its use is required by the
Joint Commission and the Veterans Health Administration (VHA), and internationally it is mandated by governments as diverse as the United Kingdom,
Denmark, and two states in Australia.(14)
Although the term is familiar to healthcare risk managers across a variety of settings, the way RCA is implemented may vary considerably between and within
organizations based on differing regulatory regimes, organizational cultures, or
internal procedures. It is not a single, well-defined technique, but rather a general approach to uncovering the systems-level causes and contributing factors
behind an incident or near-miss.
As a risk analysis approach, its purpose is to inform risk evaluation (determining
risk acceptability) and risk treatment (risk reduction).(5) As implemented in the
VHA, RCA has proven successful in its risk analysis goals, increasing the number
and quality of root causes identified.(6) But there is limited evidence to indicate
that this improved risk analysis leads to patient safety improvement.(7, 8)
2012 American Society for Healthcare Risk Management of the American Hospital Association
Published online in Wiley Online Library (wileyonlinelibrary.com) DOI: 10.1002/jhrm.20090
6
JHRM20090.indd Sec1:6
2/7/12 10:37:37 PM
Methods
Using the search terms root cause analysis or root-cause
analysis, or root cause AND RCA, we searched PubMed
and EMBASE as of April 25, 2010. Our exclusion criteria were these: published before 2000, no application of
RCA, not in healthcare, not in English, and not original
(i.e., repeated findings from another included article).
Our primary outcome measures were the use of a systematic method for generating control recommendations,
the types of risk controls recommended or implemented,
and whether the controls proved successful. Our secondary outcome measures were to study demographics (e.g.,
country of origin), the time and monetary costs associated
with the RCA process, and how success was measured.
Risk controls were categorized using a modified version of
the National Institute for Occupational Safety and Health
(NIOSH) hierarchy of risk controls(11):
Elimination: Stop using the hazardous process or materials.
Results
Study Demographics
Our search returned 231 unique articles, 60 of which met
the inclusion criteria. Eighteen were excluded because
they were published before 2000, 14 because they did not
pertain to healthcare, 127 because they did not describe
an application of RCA, 11 because they were not written in English, and 1 because it repeated the findings of
another included study.
The studies were overwhelmingly American and hospital
based: Not counting one study that took place in both
countries; the United States accounted for 41 of the studies, the United Kingdom for 6, and a joint U.S. and U.K.
study 1. No other country accounted for more than three.
Nearly 80% (n = 47) of the studies were from hospitals or
hospital systems, not counting 5 nationwide studies from
the VHA.
DOI: 10.1002/jhrm
JHRM20090.indd Sec1:7
2/7/12 10:37:37 PM
Elimination
Design controls
Administrative controls
the use of administrative controls alone. None of the studies reported that the risk controls had proven ineffective.
Measures of Success
Of the 14 studies that explicitly stated that the risk controls had been successful, only two used any form of
control to demonstrate that the apparent improvement
was the result of the risk controls. Most described success
in the form of reduced (or no additional) incidents of the
type described, but typically it was not clear how this was
measured. The use of audits or other active surveillance
techniques was seldom noted.
Time and Monetary Investment
None of the studies reported the amount of money spent
in relation to an RCA, and few reported the time investment. One reported 66 person-hours spent on an RCA
related to a series of dispensing errors in community pharmacies.(14) Another required 640 person-hours from the
core team alone, even though the data needed for root
cause analysis were collected before the first team meeting.(15) One suggested that improvement teams should
commit to a schedule of 90-minute weekly meetings for 7
weeks, but it was not clear whether the authors followed
this advice themselves or how many team members were
involved.(16)
Mills et al. of the VHA reported that 143 single-incident
RCAs related to adverse drug events (ADE) took a median
of 35 person-hours (with a range of 6 to 1,590 hours).(17)
Mills et al. also reported that the 176 aggregate RCAs
examined in their paper on patient falls took 47.80 personhours on average (SD = 32.40 hours)(18) and that 94
aggregate RCAs on suicide or suicidal behavior took 33.5
hours on average (SD = 25.8 hours).(19) Aggregate RCA is
a process through which a series of already completed RCAs
on the same topic is assessed to identify trends and systems
issues across groupings of similar events.(20)
Discussion
After conducting an RCA, healthcare workers are left to
their own devices in generating risk control plans. Implicit
in this state of affairs is the notion that a good understanding of the risks will necessarily lead to good risk control. This may be a reasonable assumption in the industrial
settings where RCA originated (where its use is often led
by safety and reliability engineers), but healthcare workers
are generally not trained in the principles of safety engineering.(30, 31) They experience significant difficulty in
generating and implementing risk treatment recommendations, and those they produce are often not
JHRM20090.indd Sec1:8
DOI: 10.1002/jhrm
2/7/12 10:37:37 PM
DOI: 10.1002/jhrm
JHRM20090.indd Sec1:9
C O N C LU S I O N
Very little research has touched on risk control methods in
healthcare.(47) This work provides evidence about the quality of risk control action planning after an RCA. It demonstrates that high-quality risk control plans do not reliably
result from current practice, even among published RCAs,
which are presumably of higher quality than run-of-the-mill
RCAs. Best practices have not been established for recommendations for action, follow-up, and analyzing results
after an RCA,(48), but administrative controls are widely
accepted to be the weakest form of risk control.(4956)
James Bagian, one of the pioneers of healthcare RCA,
has conducted an analysis of historical data from Joint
Commission surveys that lends further support to this
risk control hierarchy. He demonstrated that in scheduled
surveys, there was relatively little difference in compliance rates between standards classified as administrative
controls and those classified as engineering controls. But
in unannounced surveys, hospitals were far less likely to be
found in compliance with administrative controls versus
engineering controls.(57) The apparent implication is that
engineering controls (i.e., design controls) work even when
no one is watching; administrative controls often do not.
2/7/12 10:37:37 PM
The fact that we also demonstrated the healthcare industrys overwhelming reliance on administrative controls is
quite troubling. In view of this, the use of formal methods
to improve the quality of the risk treatment process may
be warranted.
RE FE REN C ES
10
JHRM20090.indd Sec1:10
DOI: 10.1002/jhrm
2/7/12 10:37:37 PM
31. Youngson GG, Flin R. Patient safety in surgery: Nontechnical aspects of safe surgical performance. Patient
Saf Surg. 2010;4(1):4.
DOI: 10.1002/jhrm
JHRM20090.indd Sec1:11
11
2/7/12 10:37:38 PM
56. Manuele FA. Risk assessment and hierarchies of control. Prof Safe. 2005;50:3339.
12
A BO U T TH E A U TH O R S
Alan J. Card, MPH, CPH, CPHQ, is a doctoral candidate at the University of Cambridge Engineering Design
Centre and President/CEO of Evidence-Based Health
Solutions, LLC. James Ward, BEng, CEng, PhD, MIET,
works for the University of Cambridge as a researcher in
patient safety, and for a number of hospitals in the local
region. P. John Clarkson, PhD, BA(Eng), is a professor at
the University of Cambridge and director of the Engineering
Design Centre.
JHRM20090.indd Sec1:12
DOI: 10.1002/jhrm
2/7/12 10:37:38 PM