Skip to main content
Quality & Patient Safety11 min read

Root Cause Analysis After a Sentinel Event: Making It Change Things

Running an RCA that produces real change: securing facts in the first 72 hours, team composition, timeline reconstruction, fishbone and 5 Whys done properly, the action hierarchy, and CAPA closure that survives verification.

Dr. Harsh Vasa

Patient Safety and Clinical Risk Lead

#root cause analysis hospital#sentinel event investigation#capa healthcare#action hierarchy patient safety#rca methodology
Root Cause Analysis After a Sentinel Event: Making It Change Things

The first seventy-two hours are about facts, not causes

Before any analysis begins, the evidence has to be secured, and it degrades quickly. The infusion pump goes back into circulation. The drug vial goes into the sharps bin. The nurse who was on duty goes on two days off and her memory reorganises itself around what she has since been told. The case sheet acquires later entries. Within seventy-two hours, a meaningful proportion of what an investigation would want to know has become unavailable, and no amount of methodological rigour afterwards recovers it.

So the immediate response is custodial. Sequester the device with its settings undisturbed and its log intact. Retain the vial, the tubing, the batch and the packaging. Take a certified copy of the clinical record as it stood at the time, including the electronic audit trail, and note who has accessed or amended it since. Photograph the physical environment if layout is relevant. Record the staffing on duty, the census, and anything unusual about that shift. None of this presumes fault; it preserves the ability to find out.

Interview the people involved early and separately, and be clear with them about the purpose. Guidance from the patient safety improvement literature, including the RCA2 framework published by the National Patient Safety Foundation, recommends initiating the review within about seventy-two hours for precisely this reason. Interviewing early also matters for the staff themselves, who are usually distressed and who benefit from being asked what happened before they have spent a week imagining what they will be accused of.

Who should be on the team, and who should not

Keep the team small. Four to six people is the working range, and larger groups reliably produce longer meetings and weaker conclusions. It needs someone who understands the process being examined, someone with authority to implement whatever comes out, someone trained in the method to facilitate, and someone from outside the involved department who can ask the questions insiders no longer see. A frontline clinician of the same discipline as those involved, but not involved themselves, is usually the most valuable member.

The people directly involved in the event should not be team members, and this is not a judgement about them. They are witnesses, and a witness who is also an analyst cannot examine their own decisions with any freedom. Interview them, involve them in reviewing the timeline for accuracy, share the findings with them before publication, but do not seat them on the panel. Hospitals that do this out of fairness usually produce an analysis that stops politely short of the difficult finding.

Departmental heads present a subtler problem. A head of department on the panel investigating their own unit changes what other members will say out loud, particularly junior members. Where their process knowledge is essential, bring them in as a subject expert for specific sessions rather than as a standing member. The facilitator should be someone with no line relationship to anyone in the room, which in most hospitals means the quality or patient safety lead.

Team composition rules worth writing into the RCA policy

  • Four to six members, with a trained facilitator who has no line authority over them
  • At least one frontline clinician of the same discipline, not involved in the event
  • At least one member from outside the department concerned
  • A member with authority to approve and fund resulting actions
  • Those directly involved participate as witnesses and reviewers, never as panel members

Reconstructing the timeline before proposing any cause

The timeline is the foundation and it should be built before anyone says the word cause. Lay out every event in sequence with a timestamp and a source: what was ordered, when, by whom, what was dispensed, when it was administered, what was documented, what alarms sounded, who was called, when they arrived. Build it on a wall or a long document rather than in someone's notes, because the value comes from the team seeing the whole sequence at once.

Two things emerge from a properly built timeline that emerge from nothing else. The first is gaps, where forty minutes pass with no record of anything, and those gaps are almost always where the interesting question lives. The second is contradictions between sources, where the nursing note and the pump log disagree about a time. Do not resolve contradictions by choosing the more plausible account. Record both, name the discrepancy, and treat it as a finding about your documentation as well as about this case.

Distinguish clearly between what is documented, what is remembered, and what is inferred, and mark each entry accordingly. Teams that blend the three produce a narrative that reads convincingly and cannot be defended if challenged later, which matters if the case becomes medico-legal. It is also intellectually necessary: an RCA that treats an inference as a fact will build its causal analysis on it, and the entire chain of conclusions inherits the weakness.

Event timeline wall showing timestamped entries, source markers and an unexplained gap in the record
Event timeline wall showing timestamped entries, source markers and an unexplained gap in the record

Fishbone and 5 Whys, done properly and done badly

The fishbone diagram organises contributing factors into categories so the team is forced to look in places it would otherwise skip. For clinical events, useful categories are patient factors, task and process factors, staff factors, team and communication factors, equipment and environment, and organisational and management factors. Its purpose is breadth. A team that fills only the staff factors branch and leaves equipment and organisational factors empty has not completed the exercise, whatever the diagram looks like.

The 5 Whys chain gives depth, and its failure mode is stopping at the first answer that feels like a cause. Why was the wrong concentration given? Because the nurse selected the wrong vial. Most hospital investigations stop there, having arrived at a person. Continue: why were two concentrations of the same drug stocked in the same drawer, why was the label design nearly identical, why did the procurement change of supplier not trigger a review of ward stock, why does nobody own that check. The useful answers begin around the fourth question.

The discipline that separates a real analysis from theatre is a simple rule: if the answer to a why is a person's name, ask why again. Human error is the starting point of an investigation, never its conclusion. The corollary is that the team must ask what about this system made this error likely for a competent person on a busy shift, because that formulation produces different answers from asking what this person did wrong, and only the first kind of answer can be fixed.

Fishbone diagram with contributing factor branches and a 5 Whys chain continuing past the individual to system causes
Fishbone diagram with contributing factor branches and a 5 Whys chain continuing past the individual to system causes

Signs an RCA has stopped too early

  • The stated root cause names a person or a professional group
  • Only the staff factors branch of the fishbone has entries
  • No question was asked about procurement, staffing levels or workload
  • Every proposed action is training, reminder or policy revision
  • The report contains the phrase failure to follow protocol without asking why

From causes to actions: the hierarchy that predicts effectiveness

Actions are not equally effective and the difference is well described. At the strong end are changes that make the error physically difficult or impossible: forcing functions, physical removal of a hazard, architectural or equipment changes, standardising to a single concentration so the wrong one cannot be selected. In the middle sit checklists, redundancy, software prompts, clear labelling and staffing adjustments. At the weak end sit education, training, new policy, warning signs and asking staff to be more careful.

Weak actions dominate hospital CAPA registers because they are quick, cheap and require nobody's approval. Retrain the staff, circulate a memo, add the item to induction. They are not useless, and they are appropriate as supporting measures, but as the sole response to a sentinel event they predict recurrence. The test is straightforward: if the same competent person had the same shift again, with the same workload, would your action have prevented it? Training rarely passes that test; removing the second concentration from the ward stock does.

The concentrated potassium chloride story is the canonical example and it is worth invoking whenever a team drifts toward training. Hospitals worldwide had repeated fatal events from inadvertent undiluted administration, and repeated rounds of education did not stop them. Removing concentrated potassium chloride ampoules from general ward stock did. Nothing about staff competence changed; the possibility of the error was removed. Every RCA should produce at least one action in the strong or intermediate band, and a team that cannot find one should say so explicitly rather than padding the report.

Action hierarchy from forcing functions at the strong end down to education and reminders at the weak end
Action hierarchy from forcing functions at the strong end down to education and reminders at the weak end

Our register had eleven corrective actions from four investigations and nine of them were retraining. When we scored them against the hierarchy the room went quiet, because everyone could see we had not actually changed anything.

Clinical risk manager at a 320-bed corporate hospital

Writing CAPA that can be closed with evidence

A corrective action needs four things or it cannot be closed: a specific description of what will be different, a named owner by role, a target date, and a statement of what evidence will demonstrate completion. Actions written as improve communication between theatre and ward or strengthen the medication process cannot be verified, cannot be closed honestly, and sit on the register for years while everyone learns to ignore it. Rewrite them until they name an observable change.

Separate corrective from preventive explicitly. Corrective action addresses this event and its immediate causes. Preventive action addresses the same failure mode wherever else it could occur, which usually means other units, other shifts, other drugs, other procedures. A hospital that fixes the labelling on one drug in one ward after a serious event has done half the work and will meet the same problem in a different corridor. The preventive question is always where else does this apply.

Assign a verification date separate from the completion date, and put a different person on it. Completion is the owner saying it is done. Verification is somebody checking the evidence on the floor, typically thirty to ninety days later, and confirming the change is still in place and working. This is the step hospitals skip most often, and it is the step that distinguishes a closed action from a change that quietly reverted once the attention moved on.

Minimum fields for every action on the register

  • The observable change, written so a stranger could tell whether it happened
  • Effectiveness band: strong, intermediate or weak, recorded explicitly
  • Named owner by role and a target completion date
  • The specific evidence that will be produced at closure
  • A separate verification date and a different named verifier

Closure, disclosure and the staff who were involved

Complete the analysis within a defined window and hold to it. Guidance in the RCA2 framework points at something in the range of thirty to forty-five days from initiation to completed actions, and the reasoning is practical: beyond that, memories fade, staff move on, and the organisational urgency that makes change possible dissipates. An RCA that is still open after six months has usually ceased to be an investigation and become a document.

Handle disclosure to the patient or family as a parallel track with its own owner, not as an output of the RCA. Families need early, honest acknowledgement that something went wrong and that it is being investigated, followed by an account of what was found. The Indian legal environment offers no formal peer review privilege, so an RCA report is not protected in the way clinicians often assume. Write it factually, avoid speculative attribution of blame, and involve your medico-legal advisor on serious cases from the beginning rather than at the end.

Finally, look after the staff involved. Clinicians who make a serious error carry it heavily, and the ones most affected are frequently the most conscientious. A hospital that runs a rigorous system analysis while leaving the individual unsupported gets the analysis right and the culture wrong, and the next person will not report. Assign someone to check on them at intervals, keep them informed of the findings, and make sure they hear from a senior clinician that the system, not their character, is what is being examined.

Share this article
Back to all articles

Keep reading

Related articles

See HealUDoc in action

From EHR to analytics, watch how one platform runs your entire hospital. Book a personalized walkthrough with our team.