Five complete FMEA worksheets from real hospital quality-improvement projects: medication administration, patient identification, blood transfusion, ED triage, and discharge reconciliation. Each includes Severity, Occurrence, and Detection scores, RPN calculations, and the corrective actions implemented. Use these as reference when building your own HFMEA or preparing Joint Commission LD.04.04.05 documentation.

For a different set of cases across manufacturing, automotive, software, food processing, and aerospace, see our cross-industry FMEA examples. For methodology, see the complete FMEA guide.

Jump to an example:

  1. HFMEA vs Traditional FMEA — quick primer
  2. 1. Medication Administration — ICU Heparin Protocol
  3. 2. Patient Identification — Wrong-Patient Procedure Prevention
  4. 3. Blood Transfusion — Type and Crossmatch Process
  5. 4. Emergency Department Triage — Chest Pain Pathway
  6. 5. Discharge Medication Reconciliation
  7. HFMEA Hazard Score vs RPN — side-by-side
  8. Frequently asked questions

HFMEA vs Traditional FMEA — Quick Primer

Healthcare uses two variants of FMEA. Traditional FMEA uses the standard RPN = S × O × D formula on a 1–10 scale (same as automotive and software). HFMEA — developed by the Veterans Affairs National Center for Patient Safety in 2001 — simplifies the scoring to a Hazard Score Matrix of Severity × Probability on a 1–4 scale, then applies a decision tree to judge whether existing controls already mitigate the risk.

The five case studies below use the traditional 10-point RPN format because it remains the most common in hospital quality-improvement work and translates directly to ISO 14971 risk management documentation used by medical device vendors. A side-by-side comparison of both scales is included at the end of this article.

Joint Commission note: The Joint Commission’s LD.04.04.05 standard requires one proactive risk assessment every 18 months on a high-risk process. Either HFMEA or traditional FMEA satisfies this standard as long as the worksheet includes failure modes, effects, scoring, and an action plan with owners and due dates.

1 Medication Administration — ICU Heparin Protocol (PFMEA)

Healthcare · Pharmacy & Nursing

Scope: Process FMEA for continuous IV heparin infusion on a medical ICU. Triggered by an Institute for Safe Medication Practices (ISMP) alert on concentration mix-ups. The team analyzed ordering, pharmacy preparation, nurse verification, pump programming, and aPTT-based titration. Heparin is on the ISMP High-Alert Medications list; Severity 9–10 items dominate.

Process StepFailure ModeEffect SCauseOControlsDRPN
OrderingWrong concentration selected (100 U/mL vs 25,000 U/500 mL)10× dose delivered; major bleed; possible death 10Look-alike order sets in EMR3Weight-based order set, pharmacist review4 120
Pharmacy prepConcentration labeled incorrectly on IV bagWrong infusion rate; bleed or sub-therapy 9Manual labeling after compounding3Barcode verification; second-pharmacist check3 81
Nurse verificationTwo-nurse independent check skippedProgramming error reaches patient 9Staffing pressure; protocol fatigue5Policy; unit audits quarterly6 270
Pump programmingRate entered in mL/hr instead of units/hr25× under- or over-dose 10Pump accepts either unit; no interlock3Smart-pump drug library (soft limit)4 120
aPTT titrationDose adjusted using stale lab (> 8 h old)Sub- or supra-therapeutic; bleed or clot 8Lab result not reviewed before titration4Nomogram in EMR; reminder at 6 h5 160
Actions taken: Two-nurse check (RPN 270) → EMR-enforced barcode double-scan that blocks infusion start until both badges are scanned. Stale aPTT titration (RPN 160) → hard-stop in EMR if last aPTT > 6 h old. Pump mL/hr mistake (RPN 120) → smart-pump library updated to hard limit in units/hr only. Heparin infusions moved to dedicated high-alert pump channel with distinct colored tag.

2 Patient Identification — Wrong-Patient Procedure Prevention (PFMEA)

Healthcare · Patient Safety

Scope: Process FMEA for bedside procedure verification on an inpatient medical/surgical floor. Driven by a near-miss sentinel event (central line attempted on wrong patient). Aligns with National Patient Safety Goal NPSG.01.01.01 (use at least two patient identifiers). Any S ≥ 9 item is automatically escalated regardless of RPN.

Process StepFailure ModeEffect SCauseOControlsDRPN
AdmissionWristband printed with wrong MRNEvery downstream ID check fails silently 10Registration clerk mis-typed DOB2Admit nurse visual check6 120
Pre-procedure verificationOnly name asked; DOB skippedTwo roommates with similar names swapped 9Time pressure; single-identifier habit4Policy; audit tool during rounds5 180
EMR chart openPrior patient’s chart left open; order placed on wrong recordWrong-patient order; delayed care; potential harm 8Shared workstation; no session timeout5Manual logout reminder at huddle7 280
Specimen labelingBlood tube labeled after leaving bedsideWrong-patient lab result; wrong treatment decision 9Workflow allows labeling at workstation3Policy: label at bedside6 162
ConsentConsent signed for wrong procedureUnconsented procedure; potential harm 9Copy-paste from another chart2Read-back of procedure to patient4 72
Actions taken: EMR chart left open (RPN 280) → 90-second idle auto-logout enforced; single sign-on with smart-card tap-in. Two-identifier skipped (RPN 180) → two-identifier scripted check (name + DOB) printed on every procedure cart. Specimen labeling (RPN 162) → portable barcode printer attached to phlebotomy carts; label-at-bedside now enforced by Epic specimen workflow. Registration DOB typo (RPN 120) → second-identifier confirmation by admitting nurse before wristband applied.

3 Blood Transfusion — Type and Crossmatch Process (PFMEA)

Healthcare · Transfusion Medicine

Scope: Process FMEA for the full red-cell transfusion chain from specimen draw to bedside administration. ABO incompatibility is rare (~1 in 40,000) but is a Severity 10 never event. Aligned with AABB (Association for the Advancement of Blood & Biotherapies) standards and FDA 21 CFR 606.

Process StepFailure ModeEffect SCauseOControlsDRPN
Specimen collectionSample drawn from wrong patient (WBIT — wrong blood in tube)ABO-incompatible transfusion; fatal hemolytic reaction 10Label not verified at bedside3Two-identifier check; signed label5 150
Blood bank typingSingle type recorded (no second historic type on file)Typing error undetected; wrong unit issued 10Policy allows single-sample issue2Two-specimen rule for first-time types3 60
Unit issueWrong unit placed in cooler for ward pickupWrong patient identifier on unit; potential mismatch 10Manual cooler assembly by tech2Barcode scan at cooler and at pickup2 40
Bedside checkTwo-nurse verification at bedside skippedWrong-patient transfusion not caught 10Remote second nurse over phone3Policy; infusion pump scan4 120
MonitoringVitals not checked at 15 minEarly transfusion reaction missed; delayed treatment 8Workload; no pump alarm at 15 min4Policy; nursing documentation audit6 192
Actions taken: 15-minute vitals (RPN 192) → infusion pump configured with 15-minute alert and electronic charting prompt. Specimen WBIT (RPN 150) → mandatory barcode-print-at-bedside for all type-and-screen samples; staff can no longer pre-label tubes. Remote second-nurse check (RPN 120) → policy rewritten to require both nurses physically at bedside; electronic co-sign blocked if timestamps differ by > 2 minutes or GPS/location tags disagree. All S = 10 items entered into blood bank monthly review regardless of RPN.

4 Emergency Department Triage — Chest Pain Pathway (PFMEA)

Healthcare · Emergency Medicine

Scope: Process FMEA for ESI (Emergency Severity Index) triage of adult chest pain patients, from walk-in registration to physician evaluation. Trigger: a patient with acute MI was triaged as ESI-3 and waited 48 minutes before EKG. Target: first EKG within 10 minutes per AHA door-to-EKG benchmark.

Process StepFailure ModeEffect SCauseOControlsDRPN
RegistrationChief complaint not captured accurately (“feeling off” not chest pain)Acuity under-scored; STEMI missed 10Registrar not clinically trained4Triage nurse re-asks within 5 min5 200
ESI assignmentAtypical chest pain scored ESI-3 instead of ESI-2Delayed EKG and troponin; missed MI 10Subjective interpretation of presentation4ESI training; annual competency5 200
EKG orderEKG delayed > 10 min from arrivalDelayed STEMI diagnosis; worsened outcome 9Tech not co-located with triage5Department policy; monthly metric5 225
EKG interpretationSTEMI on EKG not recognized by techCath lab activation delayed 10Tech not trained for preliminary read3Physician interpretation within 10 min4 120
BeddingPatient placed in waiting room after triageDeterioration unnoticed; cardiac arrest in lobby 10Boarding; no monitored bed available5Pulse-ox clip in waiting room; rounding every 30 min7 350
Actions taken: Waiting-room deterioration (RPN 350) → “chest pain protocol” now mandates monitored-bed placement within 10 min of triage; charge nurse holds a protected cardiac bay at all times. EKG > 10 min (RPN 225) → EKG tech relocated to triage zone; cart moved adjacent to intake desk; door-to-EKG metric posted weekly. Chief complaint accuracy (RPN 200) and ESI score (RPN 200) → registrar script includes a direct “any chest pain, pressure, or discomfort above the waist?” question; triage nurse re-assessment mandatory within 5 min for any patient ≥ 40 years old.

5 Discharge Medication Reconciliation (PFMEA)

Healthcare · Care Transitions

Scope: Process FMEA for inpatient discharge medication reconciliation on a general medicine unit. A hospital-acquired readmission review identified medication discrepancies as the leading cause of 30-day readmission. Target: zero reconciliation errors on high-risk medication classes (anticoagulants, insulin, opioids, immunosuppressants).

Process StepFailure ModeEffect SCauseOControlsDRPN
Admission med historyHome medication list incompleteDrug omitted during stay; disease exacerbation 7Patient cannot recall doses; no pharmacist interview6Patient self-report; family contact if needed6 252
Inpatient substitutionsSubstitution not reconciled to home med at dischargePatient given two equivalent drugs; therapeutic duplication 7Formulary substitution not flagged5EMR flag on substitution5 175
AnticoagulationHome warfarin resumed without bridging instructionSub-therapeutic INR; thromboembolic event 9Prescriber unaware of INR trajectory at discharge4Anticoag service consult for INR > 4 or < 25 180
Patient educationDischarge instructions given in wrong languagePatient non-adherence; readmission 6No interpreter at discharge5Electronic language tag in EMR5 150
Post-discharge follow-upNo follow-up appointment within 7 daysMedication error uncaught; readmission 7Scheduling after discharge; patient forgets6Discharge nurse schedules appt pre-discharge4 168
Actions taken: Incomplete admission history (RPN 252) → pharmacist-led medication history program rolled out to all high-risk admits (cardiology, renal, geriatrics); budget approved for 2 additional FTE pharmacists. Anticoagulation bridging (RPN 180) → anticoagulation-service auto-consult triggered by any warfarin discharge order; protocol-driven bridging plan mandatory. Formulary substitution (RPN 175) → EMR now displays both home and substituted drug side-by-side at discharge reconciliation step. 30-day readmission rate for medicine patients dropped 14% over the 6 months following implementation.

Investigate failures that slipped past your FMEA

When a risk identified in your HFMEA becomes a real event, our free 5 Whys tool guides your team through a structured root-cause analysis — no signup, no downloads. Findings can be fed back into the FMEA to update Occurrence and Detection scores.

Start 5 Whys Analysis →

HFMEA Hazard Score vs Traditional RPN

Both methods produce a prioritized list of risks; they differ in scoring granularity and the presence of a decision tree.

AttributeTraditional FMEA (10-point RPN)HFMEA (Hazard Score Matrix)
Severity scale1–101–4 (Minor / Moderate / Major / Catastrophic)
Probability scale1–10 (Occurrence)1–4 (Remote / Uncommon / Occasional / Frequent)
Detection1–10 (separate axis)Not scored — handled in Decision Tree instead
Risk outputRPN = S × O × D (range 1–1,000)Hazard Score = S × P (range 1–16)
Action thresholdTypically RPN ≥ 100–200, plus any S ≥ 9Hazard Score ≥ 8, and Decision Tree result = “Proceed”
Best forMedical device design (ISO 14971), high-granularity risk scoringHospital process risk assessment; Joint Commission LD.04.04.05
Developed byU.S. Military (MIL-P-1629, 1949); AIAG/VDA (automotive)VA National Center for Patient Safety (2001)
Which should you use? If you are documenting risk for a medical device submission (510(k), PMA, CE mark), use traditional FMEA aligned with ISO 14971. If you are running a hospital process-improvement project that will be reviewed by The Joint Commission, HFMEA is the faster, better-fitted method. Many quality teams run both in parallel when a device sits at the intersection of clinical workflow and hardware/software design.

Frequently asked questions

What is HFMEA and how is it different from FMEA?

HFMEA (Healthcare Failure Mode and Effects Analysis) is a simplified version developed by the VA National Center for Patient Safety in 2001. It uses a 4-point Severity × Probability matrix instead of three 1–10 scales and adds a Decision Tree to evaluate whether existing controls mitigate the hazard. It is recommended by The Joint Commission for proactive risk assessment.

Is FMEA required in healthcare?

Yes, in most accredited facilities. The Joint Commission Leadership Standard LD.04.04.05 requires at least one proactive risk assessment every 18 months. CMS Conditions of Participation require a QAPI program that includes prospective risk analysis. Medical device manufacturers must also apply FMEA under ISO 14971 for design risk management.

Which healthcare processes should be analyzed with FMEA first?

Start with high-severity, human-factor-heavy processes: medication administration, patient identification, blood product transfusion, surgical site marking and prep, handoff communication, and discharge medication reconciliation. These account for most of the sentinel events reported to The Joint Commission.

What is a sentinel event and how does FMEA prevent it?

A sentinel event is any unexpected occurrence involving death, serious physical or psychological injury, or the risk thereof. FMEA prevents sentinel events by mapping every failure mode, scoring its risk, and mandating action on Severity ≥ 9–10 items regardless of probability.

How do you score Severity for patient safety in FMEA?

In 10-point FMEA: Severity 10 is death or permanent disability, 9 is major injury, 8 is temporary hospitalization, 6–7 is minor injury, 4–5 is inconvenience without harm. In HFMEA: 4 is Catastrophic (death or permanent loss), 3 is Major, 2 is Moderate, 1 is Minor.

Can HFMEA be applied to medication error analysis?

Yes — medication-use FMEA is one of the most common applications. The Institute for Safe Medication Practices (ISMP) publishes an FMEA template for the five-step medication-use process. Separate FMEAs are typically run for high-risk drug classes: opioids, anticoagulants, insulin, and chemotherapy.

Who should participate in a healthcare FMEA?

A multidisciplinary team of 4–8 people with direct knowledge of the process. For a medication FMEA: pharmacist, nurse, physician, pharmacy technician, quality-improvement nurse, IT/informatics. Include frontline staff who perform the process daily — their workaround knowledge reveals undocumented failure modes.

Related resources