Abstract:Background: The first phase of an enterprise risk management (ERM) program is the identification of risks. Accurate identification is essential to a proactive and effective ERM function. The authors identified a lack of such risk identification in the literature and in practical cases when interviewing the chief risk officers from healthcare organizations. A risk inventory specific to healthcare organizations that includes detailed risk scenarios and risk impacts currently does not exist. Thus, the objective of this research is to develop an enterprise risk inventory for healthcare organizations to create a common understanding of how each type of risk impacts a healthcare organization. Method: ERM guidelines and data from 15 interviews with chief risk officers were analyzed to create the risk inventory. The identified risks were confirmed through a survey of risk managers from a range of global healthcare organizations during the ASHRM conference in 2017. Descriptive statistics were developed and cluster analysis was performed using the survey results. Results: The risk inventory includes 28 risks and their specific risk scenarios. Cyberattack was ranked as the principal risk by the participants, followed by sentinel events and risks associated with human capital management (organizational culture, use of electronic medical records and physician wellness). The data analysis showed that the specific characteristics of the survey participants, such as the length of time working in risk management, the size of the organization, and the presence of a school of medicine, do not impact an individual's opinion of the importance of the risks identified. A personal background in risk management (clinical or enterprise) was a characteristic that showed a small difference in the perceived importance of the risks from the proposed risk inventory. Conclusions: In addition to defining specific risk scenarios, the enterprise risk inventory presented in this research can contribute to guiding the risk identification phase of an ERM program and thereby support the development of a risk culture. Patient data security in hospitals that operate with high levels of technology is fundamental to delivering high quality and safe care to patients. At the top of the risk ranking, the identification of cyberattacks reflects the importance that healthcare risk managers place on this risk by allocating time and other resources. Exploring opportunities to improve cyber risk management and evaluating the benefits of using the risk inventory at the beginning of the risk identification phase in an ERM program are suggestions for future studies.

Risk management following international standards in the routine of an umbilical cord blood bank

Practice of information management of the whole process of blood sampling in emergency department

Successful implementation of a patient blood management programme in a lower middle‐income state

Contribution of proactive management of healthcare risks to the reduction of adverse events in a maternity hospital

Quality and stability studies of red blood cell concentrates from umbilical cord blood compared to their adult counterparts

Challenges of Implementing a Human Multi-Tissue Bank in a Public Hospital in the Interior of São Paulo: Under the Light of the Quality Management System

Knowledge, Attitudes, and Practices of Pregnant Women and Hospital Staff Regarding Umbilical Cord Blood Banking: Systematic Review and Meta-Analysis

When innovation meets patient blood management - a new way to see bleeding

Development of an enterprise risk inventory for healthcare

A Historical Retrospective Cohort from A Single Reference Center in Brazil

Implementation of a comprehensive clinical risk management system in a university hospital

The ISO 31000 standard in supply chain risk management

Allogeneic Umbilical Cord Blood Red Cell Concentrates: An Innovative Blood Product for Transfusion Therapy of Preterm Infants

Risk Management Framework for Nano-Biomaterials Used in Medical Devices and Advanced Therapy Medicinal Products

Practice of Risk Management in Clinical Use of Medical Consumables

Manufacturing Parameters for the Creation of Clinical-Grade Human-Induced Pluripotent Stem Cell Lines From Umbilical Cord Mesenchymal Stromal Cells

Assessing the risks for stillbirth in Sao Paulo, Brazil: protocol for a multidisciplinary case-control study - FetRisks

Umbilical cord blood transplants facilitated by the French cord blood banks network. On behalf of the Agency of Biomedicine, Eurocord and the French society of bone marrow transplant and cell therapy (SFGM-TC)

Quality improvement in neonatal care through enhanced patient safety and clinical risk management: a before-and-after study about neonatal sepsis

Risk management in the Emergency Department

Development of an umbilical cord blood transplantation-specific non-relapse mortality risk assessment score