Write a risk assessment for armed hospital security

Risk Assessment and Safety Procedures for Armed Hospital Security Personnel ===========================================================================

Assessment Date: \[DATE]

Assessor: \[ASSESSOR NAME]

Department/Area: \[DEPARTMENT/AREA]

Review Date: \[REVIEW DATE]

1\. Assessment Scope

---

This risk assessment covers armed hospital security operations within inpatient and outpatient healthcare environments, including entrances, lobbies, emergency departments, behavioral health areas, patient transport routes, parking areas, and other locations where security personnel may interact with patients, visitors, staff, contractors, or the public. It addresses routine patrol, access control, visitor screening, response to workplace violence, patient escort and transport support, firearm carriage and handling, incident response, and post-incident reporting. The assessment includes risks to security officers, clinical staff, patients, visitors, contractors, and members of the public who may be affected by security operations. It excludes tactical law-enforcement operations, off-duty personal firearm use, and non-work-related criminal investigations unless they directly affect hospital security duties. The assessment is intended to support a workplace violence prevention program, injury and illness prevention activities, and healthcare security compliance obligations.

2\. Risk Assessment Methodology

---

This assessment uses a structured workplace violence risk assessment approach aligned with a 5x5 matrix and the hierarchy of controls. Hazards were identified by reviewing the described armed hospital security function, typical healthcare violence scenarios, patient and visitor access risks, firearm-related risks, and emergency response demands. Each hazard was evaluated for initial likelihood and severity using the required scales: Likelihood \= Rare, Unlikely, Possible, Likely, Almost Certain; Severity \= Negligible, Minor, Moderate, Major, Catastrophic. Overall risk ratings are expressed as Low, Medium, High, or Extreme. Controls are prioritized using the hierarchy of controls: elimination, substitution, engineering controls, administrative controls, and PPE. Residual risk reflects the expected risk after the listed controls are implemented and maintained. The assessment also incorporates workplace violence prevention, reporting, training, monitoring, and emergency preparedness expectations for healthcare settings.

3\. Risk Matrix Reference

---

The following matrix is used to evaluate risk levels based on likelihood and severity:

| Rare | Unlikely | Possible | Likely | Almost Certain | | Severity | Catastrophic | Low | Low | Low | Medium | Medium | | Major | Low | Low | Medium | Medium | High | | Moderate | Low | Medium | Medium | High | High | | Minor | Medium | Medium | High | High | Extreme | | Negligible | Medium | High | High | Extreme | Extreme |

4\. Hazard Identification and Risk Evaluation

---

1\. Physical assault or threat of assault by patients, visitors, or accompanying persons during routine security duties, including triage support, visitor management, and response to agitation.

Potential Consequences: Security personnel may suffer bruises, fractures, head injury, bites, eye injury, psychological trauma, lost work time, or escalation to serious violence. Patients and staff may also be injured during intervention or restraint attempts.

Affected Persons: Armed security officers, nurses, physicians, patients, visitors, and nearby staff.

Initial Risk Assessment

Control Measures

• Eliminate unnecessary face-to-face confrontation by using remote communication, controlled access points, and early intervention before escalation.
• Substitute high-conflict interactions with non-contact methods such as telephone follow-up, remote visitor verification, and behavioral alerts where clinically appropriate.
• Install engineering controls including enclosed reception areas, deep counters, controlled doors, alarm systems, surveillance cameras, and weapon detection at designated entrances.
• Use administrative controls such as clear zero-tolerance violence policies, visitor screening, restricted visitor lists, patient violence history flags, staffing plans for high-risk times, and immediate backup response procedures.
• Provide PPE appropriate to the role, including body armor where authorized by policy and threat assessment, and communication devices for rapid assistance.

Residual Risk Assessment

2\. Firearm or other weapon introduction into the facility by patients, visitors, or intruders, including concealed weapons and improvised weapons.

Potential Consequences: A weapon may be used to threaten, injure, or kill staff, patients, or visitors. The event may trigger mass casualty conditions, panic, evacuation, or prolonged lockdown.

Affected Persons: Security officers, clinical staff, patients, visitors, contractors, and the public.

Initial Risk Assessment

Control Measures

• Eliminate unauthorized weapon entry through controlled access and prohibition of weapons on site except for authorized security operations.
• Use weapon detection devices, screening procedures, and monitored public entrances to identify firearms and other weapons before entry.
• Implement engineering controls such as alarm systems, surveillance, secure vestibules, and protected screening stations.
• Apply administrative controls including search procedures, visitor management, law enforcement coordination, escalation criteria, and immediate reporting of weapon-related incidents.
• Require secure firearm handling procedures for armed security staff, including retention holsters, safe storage, and strict accountability for issued weapons and ammunition.

Residual Risk Assessment

3\. Use-of-force escalation during restraint, detention, or physical intervention with aggressive individuals.

Potential Consequences: Improper force may cause injury to the subject, security staff, or bystanders, and may create legal, regulatory, and reputational consequences. Excessive force can worsen agitation and increase violence.

Affected Persons: Security officers, patients, staff, visitors, and witnesses.

Initial Risk Assessment

Control Measures

• Eliminate physical intervention when safe alternatives exist by using verbal de-escalation, distance, and containment.
• Substitute hands-on intervention with coordinated team response and law-enforcement support when the threat exceeds hospital security capability.
• Use engineering controls such as barriers, secure rooms, and controlled movement routes to reduce the need for physical contact.
• Apply administrative controls including use-of-force policy, escalation thresholds, restraint authorization rules, post-incident review, and documentation requirements.
• Provide PPE such as gloves and protective equipment as required by policy and task-specific risk.

Residual Risk Assessment

4\. Firearm handling error, negligent discharge, or accidental injury during armed security operations.

Potential Consequences: An accidental discharge may cause fatal or serious injury to staff, patients, or visitors, damage property, and create a major emergency response event.

Affected Persons: Armed security officers, nearby employees, patients, visitors, and contractors.

Initial Risk Assessment

Control Measures

• Eliminate unnecessary handling by keeping firearms holstered unless a lawful and immediate defensive need exists.
• Substitute administrative carry practices with approved retention holsters and secure storage when off duty or in restricted areas.
• Use engineering controls such as approved holsters, trigger protection, secure armory storage, and weapon inspection systems.
• Apply administrative controls including qualification standards, safe handling rules, loading/unloading procedures, maintenance checks, and prohibition on unauthorized modifications.
• Require PPE and duty gear appropriate to the armed role, including secure holsters and communication equipment.

Residual Risk Assessment

5\. Delayed response to workplace violence due to insufficient staffing, poor coverage, or security personnel being assigned conflicting duties.

Potential Consequences: Delayed intervention can allow assaults to continue, increase injury severity, reduce containment capability, and expose staff to prolonged danger.

Affected Persons: Security officers, clinical staff, patients, visitors, and emergency responders.

Initial Risk Assessment

Control Measures

• Eliminate single-coverage gaps by staffing to match risk periods and high-risk locations.
• Substitute ad hoc response with a formal dispatch and backup system that ensures immediate support.
• Use engineering controls such as panic alarms, radios, duress systems, and centralized monitoring.
• Apply administrative controls including minimum staffing levels, relief coverage, response-time targets, and no-conflict assignment rules for designated responders.
• Provide PPE and communication devices to support rapid coordination and safe approach distances.

Residual Risk Assessment

6\. Exposure to aggressive behavior during patient transport, escort, or movement through stairwells, elevators, hallways, and public areas.

Potential Consequences: Security officers may be isolated, ambushed, or unable to summon help quickly. Patients may attempt escape, assault staff, or access weapons or contraband.

Affected Persons: Security officers, nurses, transport staff, patients, and bystanders.

Initial Risk Assessment

Control Measures

• Eliminate unnecessary solo transport of high-risk patients.
• Substitute isolated movement with team escort, scheduled transport windows, or alternative routes that reduce exposure.
• Use engineering controls such as controlled elevators, access doors, surveillance, and secure transport pathways.
• Apply administrative controls including pre-transport risk screening, staffing requirements, communication protocols, and prohibition on transporting high-risk patients alone.
• Use PPE and restraint equipment only when clinically and legally authorized and when supported by policy and training.

Residual Risk Assessment

7\. Psychological stress, fatigue, and hypervigilance associated with repeated exposure to violence, threats, and armed response duties.

Potential Consequences: Stress may impair judgment, increase reaction time, contribute to burnout, reduce situational awareness, and increase the likelihood of errors or unsafe force decisions.

Affected Persons: Security officers, supervisors, and other staff involved in violent incident response.

Initial Risk Assessment

Control Measures

• Eliminate unnecessary exposure by rotating staff away from prolonged high-intensity assignments when feasible.
• Substitute prolonged solo exposure with team-based coverage and structured relief periods.
• Use engineering controls such as reliable communication systems and monitored alarm networks to reduce uncertainty.
• Apply administrative controls including critical incident debriefing, access to counseling, fatigue management, and post-incident recovery time.
• Provide PPE and duty equipment that supports confidence and reduces physical vulnerability, while recognizing PPE does not control psychological harm alone.

Residual Risk Assessment

8\. Failure to recognize or communicate patient-specific violence risk factors, including history of violence, intoxication, psychiatric instability, confusion, or gang-related concerns.

Potential Consequences: Security and clinical staff may be surprised by escalating behavior, leading to delayed intervention, injury, or weapon introduction.

Affected Persons: Security officers, nurses, physicians, patients, and visitors.

Initial Risk Assessment

Control Measures

• Eliminate information gaps by requiring violence risk screening and handoff communication for high-risk patients.
• Substitute informal memory-based communication with standardized flags, logs, and shift reports.
• Use engineering controls such as electronic alerts, chart flags, and controlled access to high-risk areas.
• Apply administrative controls including multidisciplinary review, visitor restrictions, behavior plans, and confidentiality-protected sharing of risk information.
• Provide training so staff can recognize triggers, warning signs, and escalation indicators.

Residual Risk Assessment

5\. General Control Measures

---

• Maintain a written workplace violence prevention and security program that is specific to the hospital environment and integrated with the injury and illness prevention system.

The program should define responsibilities, reporting pathways, response expectations, and corrective actions for all shifts and departments.

• Use layered access control and screening at public entrances to reduce unauthorized entry and weapon carriage.

Combine visitor management, screening, surveillance, and protected reception points to control entry without impeding emergency operations.

• Ensure adequate staffing and immediate backup response capability for high-risk units and time periods.

Staffing plans should account for emergency department surges, night work, patient transfers, mealtimes, and behavioral health activity.

• Require prompt incident reporting, investigation, and corrective action for all threats, assaults, weapon events, and near misses.

Reports should be reviewed for trends, root causes, staffing issues, environmental contributors, and training gaps.

• Coordinate security operations with clinical leadership, law enforcement, and emergency management functions.

Joint planning should cover active threat response, evacuation or sheltering, mass casualty events, and post-incident recovery.

6\. Emergency Preparedness

---

• Establish an immediate alarm and notification process so security, clinical leaders, and other responders can be summoned without delay during a violent incident or weapon threat.
• Develop and drill response plans for active shooter, armed intruder, hostage, and weapon-discovery scenarios, including evacuation, sheltering, lockdown, and law enforcement notification procedures.
• Provide post-incident medical response, first aid, and access to trauma counseling for affected employees, patients, and witnesses after violent events.
• Require post-incident debriefing and preservation of scene information so the organization can determine what occurred, what controls failed, and what corrective actions are needed.
• Maintain a violent incident log and incident reporting process that captures the nature of the event, response actions, injuries, weapon involvement, and continuing threats while protecting personal identifying information.

7\. Training Requirements

---

• Workplace Violence Prevention and Recognition Training: All armed security personnel should be trained to recognize warning signs of escalating behavior, understand workplace violence types, identify patient-specific risk factors, and apply the facility’s violence prevention procedures. Training should emphasize that violence is not tolerated and that early reporting is required. [3]

[7]

• Recognize verbal threats, agitation, stalking behavior, and weapon indicators.
• Understand reporting channels and escalation thresholds.
• Apply de-escalation before physical intervention whenever feasible.
• De-escalation and Communication Skills: Security personnel should receive practical training in verbal de-escalation, calm command presence, distance management, and coordinated team communication. Training should include practice with realistic scenarios and debriefing so deficiencies can be corrected. [2]

[5]

• Use non-provocative language and maintain safe positioning.
• Coordinate with clinical staff before approaching agitated individuals.
• Practice scenario-based response and corrective feedback.
• Use of Force, Restraint, and Defensive Tactics: Armed security staff must be trained on lawful, proportional use of force, defensive tactics, restraint limitations, and coordination with clinical staff. Training must clearly distinguish appropriate and inappropriate restraint practices and chemical restraint limitations where applicable. [2]

[2]

• Use only the minimum force necessary to control the threat.
• Coordinate with clinical leadership before restraint when time and safety permit.
• Document all force events and review them after the incident.
• Firearms Safety and Qualification: Armed security personnel should receive initial and recurring firearms training covering safe handling, retention, storage, maintenance, target discrimination, and judgment under stress. Training must reinforce that firearms are used only under lawful authority and in accordance with hospital policy and applicable law. [6]

[3]

• Maintain qualification and proficiency standards.
• Practice safe holstering, retention, and weapon accountability.
• Train on low-light and high-stress decision-making.
• Incident Reporting and Post-Incident Response: Security personnel must be trained to report threats, assaults, weapon incidents, near misses, and policy breaches immediately and accurately. Training should also cover post-incident medical response, evidence preservation, debriefing, and completion of required logs and reports. [1]
• Report all incidents promptly to supervision and designated safety contacts.
• Preserve scene integrity when safe to do so.
• Participate in debriefing and corrective action review.

8\. Monitoring and Review

---

Review Frequency: Annually and after any workplace violence incident, weapon event, serious injury, near miss with high potential, or major operational change.

9\. Special Circumstances

---

• Night work increases exposure because visibility is reduced, staffing may be lower, and response times may be longer. Additional patrols, lighting checks, and backup coverage are required during overnight shifts. [7]
• Lone work or isolated assignments, including stairwells, elevators, parking areas, and remote entrances, increase vulnerability to assault and delay assistance. Lone work should be minimized for high-risk tasks. [9]
• Severe weather, poor lighting, and reduced visibility can increase the risk of unauthorized entry, slips and falls, delayed response, and concealment of weapons or suspicious behavior. Security patrols and access control should be adjusted accordingly.
• High census, emergency department surges, patient transfers, mealtimes, and behavioral health crises are special high-risk periods that require increased staffing and closer supervision. [8]
• Patients with known violence history, intoxication, psychiatric instability, or confusion require enhanced communication, escort planning, and coordinated clinical-security response. [4]

Approval and Sign-off

---

This risk assessment has been reviewed and approved by:

Assessor: _________________________ Date: __________

Manager/Supervisor: _________________________ Date: __________

Safety Representative: _________________________ Date: __________

This risk assessment must be reviewed annually and after any workplace violence incident, weapon event, serious injury, near miss with high potential, or major operational change. or when significant changes occur.

Safety powered by SALUS