Risk Controls Identified in Action Plans Following Serious Incident Investigations in Secondary Care: A Qualitative Study

OBJECTIVES:The impact of incident investigations in improving patient safety may be linked to the quality of risk controls recommended in investigation reports. We aimed to identify the range and apparent strength of risk controls generated from investigations into serious incidents, map them against contributory factors identified in investigation reports, and characterize the nature of the risk controls proposed. METHODS:We undertook a content analysis of 126 action plans of serious incident investigation reports from a multisite and multispeciality UK hospital over a 3-year period to identify the risk controls proposed. We coded each risk control against the contributory factor it aimed to address. Using a hierarchy of risk controls model, we assessed the strength of proposed risk controls. We used thematic analysis to characterize the nature of proposed risk controls. RESULTS:A substantial proportion (15%) of factors identified in investigation reports as contributing to serious incidents were not addressed by identifiable risk controls. Of the 822 proposed risk controls in action plans, most (74%) were assessed as weak, typically focusing on individualized interventions-even when the problems were organizational or systemic in character. The following 6 broad approaches to risk controls could be identified: improving individual or team performance; defining, standardizing, or reinforcing expected practice; improving the working environment; improving communication; process improvements; and disciplinary actions. CONCLUSIONS:The identified shortfalls in the quality of risk controls following serious incident investigations-including a 15% mismatch between contributory factors and aligned risk controls and 74% of proposed risk controls centering on weaker interventions-represent significant gaps in translating incident investigations into meaningful systemic improvements. Advancing the quality of risk controls after serious incident investigations will require involvement of human factors specialists in their design, a theory-of-change approach, evaluation, and curation and sharing of learning, all supported by a common framework.