All policies

ExcelCare Agency

Policy Library · v6.0

Safety & Continuity

13Safety & ContinuityCurrent

Risk Assessment Policy

How we identify, record, rate and review risk — enabling people to live the life they choose while keeping them safe.

Version
v6.0
Policy owner
Registered Manager (Risk Lead)
Effective
1 October 2026
Next review
1 October 2027
Approved by the Board of Directors
Contents10 sections

1. Purpose and principles

ExcelCare Agency provides personal care without nursing to adults in their own homes. Risk cannot be removed from someone's own home, and it should not be: a life with no risk is not a life of quality. Our task is to understand risk, reduce it where that is possible, and support the person to make informed choices about the risk that remains.

Our approach is risk enablement:

  • the person is at the centre of every assessment and their views are recorded in their own words
  • risk is balanced against independence, dignity and quality of life
  • decisions are made with the person, and where they lack capacity, in their best interests under the Mental Capacity Act 2005
  • assessments are practical and specific to the individual home and routine

2. Types of risk assessment we hold

AssessmentOwnerReview
Person-centred risk assessment (individual needs)Care staff with managerAnnually and after any change
Home environment risk assessmentCare staffAt first visit, annually, and after any incident
Moving and assisting assessmentSenior carerAnnually and when mobility changes
Medication risk assessmentSenior carerAnnually and after any medicines error
Moving and handling of equipment (hoists, aids)ManagerSix-monthly inspection
Lone working and personal safetyManagerAnnually
Fire risk and escape in the homeCare staffAt first visit and annually
Infection riskSenior carerAt each review
Safeguarding riskManagerAt each review and on any concern
Business and organisational risk registerRegistered ManagerQuarterly
Display screen and workstationOffice staffAnnually

3. The five-step method

  1. Identify the hazard — what could cause harm, to whom, and when.
  2. Decide who might be harmed and how — the person, staff, family, visitors.
  3. Evaluate the risk and decide on controls — eliminate, substitute, reduce, or accept with monitoring. Controls must be things we actually do, not aspirations.
  4. Record the findings — assessment, date, assessor, person's views, controls, residual rating.
  5. Review and update — at the stated review date, after any incident, and whenever the person's needs or home changes.

4. Rating risk

Risk is rated by combining likelihood (1 rare to 5 almost certain) with impact (1 negligible to 5 severe) on a 5x5 matrix.

ScoreRatingRequired response
1–4LowManage within the care plan; review at the normal interval
5–9ModerateWritten controls, named owner, review date
10–15HighManager sign-off, monthly review, consider referral to a specialist
16–25CriticalCare cannot proceed until controls are in place; escalate to the Registered Manager and, where needed, the local authority

5. Positive risk taking

Where a person chooses to accept a risk — for example, continuing to smoke at home, declining a walking aid, or refusing a visit at a particular time — we:

  1. discuss the risk with them in plain language and record their decision
  2. offer alternatives without pressure
  3. agree a plan that reduces harm as far as the person will accept
  4. record the decision and the person's capacity to make it
  5. review the decision regularly

A documented, informed decision is not a failing. An undocumented one is.

6. Dynamic risk assessment

At every visit, staff assess the situation on arrival: has anything changed? Are there new hazards — a fall, a smell of gas, a new pet, a person who is more unwell than usual? Staff have the authority to stop a task, leave a situation and call for advice. A dynamic assessment that changes the plan is recorded and reported to the office the same day.

7. Escalation

Any risk rated high or critical, any new hazard that cannot be controlled within the care plan, and any situation where staff feel unsafe is escalated to the Registered Manager immediately. Where an employer cannot control a risk to staff, the visit is suspended until it can be made safe.

8. Organisational risk register

The Registered Manager maintains a risk register covering strategic and operational risks: staffing capacity, regulatory compliance, information security, finance, safeguarding, and business continuity. Each risk has an owner, a rating, controls, and a review date. The register is reviewed quarterly by the Board and updated after any significant incident.

9. Training and competence

All staff complete risk assessment training at induction and annually, covering the five-step method, dynamic assessment, lone working and the use of the matrix. Competence is observed during shadowing and spot checks.

10. Monitoring

The management team audits a sample of risk assessments monthly for completeness, quality of controls and evidence of the person's involvement. Audit findings, incident trends and register movements are reported to the Board quarterly.

CQC and legal framework

  • Regulation 12 — Safe care and treatment; Regulation 17 — Good governance
  • Single Assessment Framework — Safe (S1: Learning culture; S6: Safe environments)
  • Management of Health and Safety at Work Regulations 1999

Part of the controlled document set for ExcelCare Agency, reviewed annually or sooner where regulation or guidance changes.

Related policies