2.3 Root Cause Analysis, FMEA & Sentinel Event Management

Key Takeaways

  • Root Cause Analysis (RCA / RCA2) is a retrospective, multidisciplinary investigation framework designed to identify latent system vulnerabilities following a severe safety event or near-miss.
  • Failure Modes and Effects Analysis (FMEA) is a prospective risk assessment tool used prior to introducing new processes or devices to identify potential failure points before harm occurs.
  • FMEA prioritizes systemic risks using the Risk Priority Number formula: RPN = Severity (S) x Occurrence (O) x Detection (D), where higher scores demand urgent risk controls.
  • The Joint Commission (TJC) Sentinel Event Policy defines sentinel events as unexpected occurrences involving death, permanent harm, or severe temporary harm requiring intervention to sustain life, requiring initial notification and submittal of a thorough RCA and Action Plan within 45 calendar days.
  • Corrective action plans must prioritize strong system controls (architectural forcing functions, physical barriers, automation) over weak human-dependent controls (policy updates, educational inservices, double-checks).
Last updated: July 2026

2.3 Root Cause Analysis, FMEA & Sentinel Event Management

Executive nurse leaders must achieve advanced competency in both retrospective methodologies for investigating catastrophic clinical safety events and prospective methodologies for evaluating operational risk before patient harm occurs. Effective event management transforms tragic adverse occurrences into powerful institutional learning opportunities and systemic workflow redesign, satisfying stringent accreditation mandates while advancing organizational safety culture.


Retrospective Investigation: Root Cause Analysis (RCA / RCA2)

Root Cause Analysis (RCA) is a structured, retrospective investigation process executed to uncover the underlying latent system vulnerabilities that allowed an adverse event or serious near-miss to occur. The National Patient Safety Foundation (NPSF), in partnership with the VA National Center for Patient Safety, modernized this framework into RCA2 (Root Cause Analysis and Action), emphasizing that an investigation without strong, sustainable corrective action and rigorous outcome measurement is fundamentally incomplete.

The RCA Process Steps

  1. Form a Multidisciplinary Team: Assemble a balanced team comprising quality facilitators, clinical subject matter experts, executive champions, and frontline bedside staff. Crucially, direct supervisors of involved staff should not chair the team to ensure psychological safety.
  2. Gather Data & Reconstruct Timeline: Reconstruct a precise chronological sequence of events using EHR audit trails, medical device memory logs, staff interviews, and physical environmental inspections.
  3. Execute the "5 Whys" Technique: Sequentially iterate the question "Why?" at least five times to drill past superficial active errors down to root systemic vulnerabilities.
  4. Construct an Ishikawa (Fishbone) Diagram: Systematically categorize contributing factors across six organizational domains:
    • People/Personnel: Staffing ratios, fatigue, training, interprofessional communication.
    • Process/Method: Ambiguous protocols, handoff gaps, policy enforcement.
    • Equipment/Machine: Device malfunction, software user interface flaws, uncalibrated alarms.
    • Environment/Milieu: Lighting, noise levels, spatial layout, physical interruptions.
    • Materials/Supplies: Supply shortages, look-alike drug packaging, defective tubing.
    • Leadership/Organization: Safety culture, resource allocation, executive support.
  5. Develop Actionable Corrective Strategies: Formulate high-impact corrective action plans designed to eliminate or mitigate identified systemic vulnerabilities.

Hierarchy of Corrective Action Controls (RCA2 Framework)

When evaluating proposed corrective action plans following an RCA, nurse executives must evaluate the relative strength of proposed safety controls. Corrective plans relying exclusively on human memory, heightened vigilance, or policy revisions are inherently weak and prone to recurrent failure.

+-----------------------------------------------------------------------------------------+
| STRONG CONTROLS (System Architecture, Automation, Forcing Functions)                   |
| Examples: Physical lockouts, hard-stop EHR alerts, smart pump drug library integration  |
+-----------------------------------------------------------------------------------------+
| INTERMEDIATE CONTROLS (Standardization, Simplification, Checklists)                    |
| Examples: Standardized handoff tools (SBAR), dual-independent verification, checklists  |
+-----------------------------------------------------------------------------------------+
| WEAK CONTROLS (Human-Dependent, Memory-Based, Policy-Driven)                            |
| Examples: Policy updates, staff re-education, educational memos, double-check policies   |
+-----------------------------------------------------------------------------------------+
Control StrengthFocus MechanismPractical Healthcare Examples
Strong ControlsEliminates reliance on human memory; relies on physical/architectural forcing functions and hardware/software lockouts.- Engineering forcing functions (e.g., neuraxial connectors designed so epidural tubing cannot physically attach to IV ports).<br>- Automated hard-stop drug alerts in EHR.<br>- Software automation for critical lab value notifications.
Intermediate ControlsReduces cognitive load and standardizes human processes.- Standardized communication tools (e.g., SBAR, IPASS).<br>- Standardized pre-printed surgical checklists.<br>- Visual management systems and color-coded supply carts.
Weak ControlsRelies entirely on human vigilance, memory, effort, and policy compliance.- Writing a new unit policy or revising an SOP.<br>- Conducting mandatory educational inservices or staff re-training.<br>- Adding warning labels or warning stickers to supplies.<br>- Mandating extra visual double-checks.

Prospective Risk Assessment: Failure Modes and Effects Analysis (FMEA)

While RCA is retrospective, Failure Modes and Effects Analysis (FMEA) is a prospective, proactive risk assessment methodology. Nurse leaders execute FMEA prior to implementing a new clinical workflow, installing new health technology, or renovating a clinical facility to identify potential failure points and prevent harm before it occurs.

Step-by-Step FMEA Execution Process

  1. Select a High-Risk Process: Map the process steps sequentially (e.g., bedside blood transfusion administration).
  2. Identify Potential Failure Modes: For each step, brainstorm everything that could possibly go wrong (e.g., incorrect patient identification, mislabeled blood bag, incorrect blood tubing rate).
  3. Identify Potential Failure Effects: Determine the clinical consequences for the patient if that failure occurs (e.g., acute hemolytic transfusion reaction, death).
  4. Assign Scoring Factors (1 to 10 Scale):
    • Severity (S): How severe is the potential harm to the patient? (1 = Insignificant, 10 = Catastrophic/Death).
    • Occurrence (O): How frequently is this failure mode likely to occur? (1 = Extremely Rare, 10 = Inevitable/Constant).
    • Detection (D): How likely is it that the failure will be detected before reaching the patient? (1 = Certain Detection, 10 = Impossible to Detect).
  5. Calculate the Risk Priority Number (RPN): RPN=Severity (S)×Occurrence (O)×Detection (D)\text{RPN} = \text{Severity (S)} \times \text{Occurrence (O)} \times \text{Detection (D)}
    • RPN scores range from $1$ to $1,000$. Higher RPN values indicate urgent systemic priorities.
  6. Develop & Implement Action Plans: Assign targeted interventions to lower the highest RPNs (focusing on reducing Occurrence and improving Detection).
  7. Recalculate Post-Intervention RPN: Re-evaluate the scores to confirm risk reduction.

Joint Commission (TJC) Sentinel Event Policy

The Joint Commission defines a Sentinel Event as an unexpected occurrence involving death, permanent harm, or severe temporary harm requiring intervention to sustain life. Such events are termed "sentinel" because they signal the need for immediate investigation and response.

TJC Reviewable Sentinel Event Category List

  • Inpatient suicide or suicide within 72 hours of discharge from a 24-hour care setting
  • Unintended retention of a foreign object in a patient post-surgery
  • Wrong-site, wrong-procedure, or wrong-patient surgery
  • Intrapartum maternal death or severe maternal morbidity
  • Patient fall resulting in death, fracture, or severe neurological injury
  • Hemolytic transfusion reaction involving administration of ABO-incompatible blood
  • Infant abduction or discharge of an infant to the wrong family
  • Severe pressure injury (Stage 3, 4, or Unstageable) acquired in-facility
  • Medication administration error resulting in death or permanent loss of function

Regulatory Reporting & Action Plan Timeframes

  1. Immediate Notification: Internal notification to risk management and executive leadership within 24 hours of discovery.
  2. Formal Submission to TJC: Accredited organizations are expected to complete a comprehensive Root Cause Analysis and submittal of a Sentinel Event Action Plan within 45 calendar days of the event or learning of the event.
  3. Action Plan Criteria: The plan must identify clear systemic root causes, outline specific corrective actions (emphasizing strong controls), designate responsible leaders, establish implementation deadlines, and define Measure of Success (MUS) metrics to audit long-term effectiveness.
Test Your Knowledge

A root cause analysis (RCA2) team investigates a pediatric ten-fold heparin overdose resulting from manual concentration math errors. The team proposes four corrective interventions. Which of the following proposed actions represents an INTERMEDIATE control according to the RCA2 Hierarchy of Actions?

A
B
C
D
Test Your Knowledge

A multidisciplinary team conducts a Failure Modes and Effects Analysis (FMEA) for a newly proposed automated chemotherapy compounding process. The team evaluates the failure mode 'incorrect diluent volume added to infusion bag' and assigns the following scores: Severity = 9, Occurrence = 3, Detection = 4. What is the calculated Risk Priority Number (RPN)?

A
B
C
D
Test Your Knowledge

An inpatient surgical unit experiences a patient fall resulting in a severe subdural hematoma requiring emergency neurosurgical intervention. Under The Joint Commission (TJC) Sentinel Event Policy, what action and timeline are mandated for the healthcare facility?

A
B
C
D