Safety management systems in healthcare: how to connect risk, PSIRF, CQC and governance
Updated: Oct 19
Healthcare already has incident reporting, risk registers, audits and committees. The opportunity is to connect them into a safety management system that identifies risk early, tests controls and supports informed decisions.
Do healthcare safety processes add up to a safety management system?
Most healthcare organisations are not short of safety activity. They have incident-reporting systems, risk registers, audits, policies, committees, improvement programmes and board reports. The harder question is whether those activities work together well enough to identify changing risk, test controls and help leaders act before avoidable harm occurs.
That is the practical case for a safety management system, or SMS. It should help an organisation answer four questions: What are we worried about? What is meant to keep people safe? How do we know those controls work in practice? What decision or improvement is now required?
Key points for healthcare leaders
The main argument can be summarised in five points:
An SMS connects safety policy, risk management, assurance, culture and improvement. It is not a new incident-reporting platform or committee.
PSIRF is an important part of the system, but an SMS also uses hazards, near misses, complaints, claims, staff concerns, patient experience and operational intelligence.
The strongest assurance tests whether critical controls work in everyday care, rather than counting policies, audits or completed actions.
A mature SMS supports CQC well-led expectations by connecting leadership, culture, governance, risk, partnership and measurable improvement.
Implementation should begin with existing arrangements and priority risks, not a large compliance programme.
If you are reviewing how these arrangements work together in practice, Promethean HD’s healthcare governance and transformation services can provide independent assurance and practical support to strengthen the overall system.
What is a safety management system?
The Health Services Safety Investigations Body describes an SMS as a proactive and integrated approach to managing safety. It establishes organisational structures and accountabilities, supports continuous improvement and makes safety management part of day-to-day activity. Across widely used frameworks, four connected areas recur:
Safety policy and objectives: leadership commitment, responsibilities, accountability and clear intent.
Safety risk management: identifying hazards, assessing risk and selecting proportionate controls.
Safety assurance: monitoring performance, testing whether controls remain effective and acting on weak signals.
Safety promotion and culture: developing competence, communication, participation and the conditions for people to speak up and learn.
The word “system” matters. Buying software, approving a policy or creating another committee does not create an SMS. The value comes from the connections between everyday work, risk controls, assurance, learning and leadership decisions. HSSIB is clear that there is no one-size-fits-all model and warns against a paper-based system created mainly to demonstrate compliance.
Which industries use safety management systems?
Safety management systems are established in aviation, aerospace, maritime, rail, oil and gas, defence and nuclear power. In several sectors they are regulatory requirements. The settings differ, but the basic discipline is recognisable: make responsibility clear, look for hazards before they cause harm, put controls in place, check whether those controls work, and use the findings to make decisions.
ISO standards bring a similar management-system discipline. ISO 45001 applies it to occupational health and safety, while ISO 9001 applies it to quality. Both use a cycle of planning, delivery, checking and improvement. For organisations already using quality, environmental or occupational-safety systems, the opportunity is to share useful structures and information rather than build parallel governance processes.
What has worked, and what can go wrong?
An SMS will not make an organisation safe simply because it has been launched. Its practical value is that it can clarify who owns a risk, connect frontline reality with board oversight, combine information about harm with information about emerging risk, and make control effectiveness something to be tested rather than assumed.
The evidence does not support easy claims. A 2025 NIHR systematic review, later published in BMJ Open in 2026, examined national patient-safety approaches in Australia, Canada, Ireland, New Zealand and the Netherlands. Only the Netherlands had introduced a programme explicitly based on an SMS. There were improvements in some aspects of hospital patient safety, but implementation and attributed outcomes varied. The review points to the need for local adaptation and further evaluation.
Aviation research gives a further warning. An SMS can become bureaucratic and remote from the work it is meant to support. Procedures are counted while the messy reality of work, informal relationships and human factors receives less attention. Healthcare should not copy aviation architecture and assume the same results will follow. Clinical work, professional judgement, patient involvement and care across organisational boundaries all change how a safety system must operate.
What to preserve, and what to avoid
The comparison below summarises the disciplines worth retaining and the failure modes healthcare organisations should guard against.
Preserve the discipline | Avoid the failure mode |
Clear accountability for risks and controls | A new silo owned only by the safety team |
Proactive hazard identification and weak-signal detection | Waiting for harm before paying attention |
Assurance that tests control effectiveness | Counting activity and mistaking volume for assurance |
Learning connected to improvement | Recommendations without implementation capacity |
Worker, patient and family involvement | Designing the system around reporting templates |
Adaptation to context and complexity | Aviation “lift and shift” into healthcare |
What should a healthcare safety management system include?
Patient safety must remain visible, but it cannot be managed in isolation. Workforce safety, staffing, medicines, devices, estates, infection prevention, digital clinical safety, information governance, business continuity, suppliers and commissioned services can all alter the conditions in which care is delivered. A useful SMS makes these interfaces explicit. It also distinguishes patient safety from occupational health and safety. They overlap, but neither should be assumed to cover the other.
The boundary of the system should follow the risk, not the organisation chart. That means understanding dependencies across providers, commissioners, contractors and care settings, including where responsibility is shared or unclear. It also means agreeing routes for information sharing, escalation and joint action when no single organisation controls the whole pathway.
Governance consultancy
Need clearer assurance that governance arrangements work in practice? Contact Promethean HD, who provide proportionate clinical governance, board and committee effectiveness reviews, with practical recommendations and implementation support.
Why healthcare needs an integrated approach
Healthcare risks do not respect team or organisational boundaries. HSSIB’s investigation into accountability across organisational boundaries highlighted the need for clear safety-management processes when care crosses primary, secondary and community services. A provider may manage its own part of a pathway well and still miss the risk created between services.
NHS England’s 2026 position statement recognises that many SMS components already exist in healthcare, but maturity varies. It advises organisations to design for healthcare’s operational, cultural and structural realities, test changes in real settings, integrate patient safety into the overall management system while keeping it visible, and avoid a direct “lift and shift” from other industries.
Learning before, during and after harm
Incident response is important, but an SMS cannot depend on incidents alone. It also needs hazard reporting, near misses, good catches, complaints, claims, staff concerns, patient experience, operational pressures, audit findings and observations of everyday work. Learning from successful adaptation matters too. If teams repeatedly work around a weak process to keep care safe, that workaround is useful intelligence, not proof that the process is reliable.
This broader view helps an organisation move from asking what went wrong to asking how risk is changing. It also avoids treating low reporting as evidence of safety. Low reporting may reflect low harm, but it may also reflect poor detection, inaccessible systems or a culture in which people no longer expect concerns to lead to action.
How does an SMS support PSIRF?
PSIRF has moved patient-safety work towards more considered and proportionate responses. It asks organisations to respond to incidents for learning and improvement, using compassionate engagement, system-based learning and supportive oversight. PSIRF, however, is not the whole safety-management system. It provides important learning from incidents and a disciplined way to plan responses. An SMS connects that learning with other sources of intelligence, the design of controls, assurance, culture, strategy and board decisions.
Building capability across the organisation is equally important, and our PSIRF training and implementation can help teams apply proportionate, systems-based learning consistently.
How an SMS strengthens a patient safety incident response plan
The relationship becomes clearer when the patient safety incident response plan is treated as part of the wider safety-management system.
A data-led incident profile becomes part of a wider safety-risk profile, informed by complaints, claims, audits, operational pressures, patient experience and workforce insight.
Plan priorities can be linked explicitly to strategic risks, existing controls, improvement capacity and assurance gaps.
Proportionate responses can be selected according to learning need and risk, rather than severity labels or organisational anxiety.
Safety actions can be designed as risk controls, with named ownership, implementation measures and tests of effectiveness.
Oversight can focus on whether the response and improvement system is functioning, rather than repeatedly re-investigating individual cases.
Cross-system risks can be escalated and jointly owned where no single organisation controls the whole pathway.
This is consistent with the January 2026 Patient Safety Incident Response Standards, which cover policy, planning and oversight, competence and capacity, engagement and involvement, and proportionate responses.
ormal incident data should also be considered alongside soft intelligence and why weak signals matter for patient-safety governance, because low reporting does not necessarily mean low risk.
Managing safety during organisational change
Many serious risks develop during change: a new digital system, service redesign, estate move, staffing model, merger, outsourced pathway or financial recovery programme. An SMS should include a proportionate approach to managing change. Before implementation, leaders should identify safety assumptions, dependencies and changes to controls. During implementation, they should watch for unintended effects and weak signals. After implementation, they should test whether the change delivered the intended outcome without moving risk elsewhere.
This matters because safety, effectiveness and experience are interdependent. Improvement in one area should not be claimed without checking the effect on the others. The same applies to value and productivity. A decision can reduce cost or improve flow while weakening a safety control. Governance should make those trade-offs visible before they become harm.
For major service, technology or pathway changes, organisations should also consider using proportionate safety cases before major healthcare change so that claims, controls, assumptions and residual risks are tested before implementation.
How does SMS align with NHS safety and quality strategy?
The NHS Patient Safety Strategy, published in 2019, is built on patient safety culture and patient safety systems, supported by insight, involvement and improvement. SMS gives those ideas a practical management structure. Risk intelligence strengthens insight; participation and safety promotion strengthen involvement; assurance and managed change strengthen improvement.
The 2026 Quality Strategy for NHS-funded care in England places safety alongside effectiveness and experience and makes quality an organising principle for the next decade. It applies system-wide and emphasises accountability, transparency, outcomes and consistent improvement. An SMS can help organisations connect that strategic intent with everyday work, measurable controls and learning.
How does SMS relate to total quality management?
Safety management and total quality management should not compete for ownership or attention. Both rely on leadership, an understanding of work, staff participation, useful information and continual improvement. Both become weaker when reduced to dashboards, audits and slogans.
The difference is one of emphasis. Total quality management seeks organisation-wide improvement in quality and value. SMS maintains an explicit focus on hazards, safety risk and the assurance of controls. In healthcare, the better design is an integrated quality management system in which safety remains visible. Shared governance, data, improvement methods and management review can reduce duplication, while explicit safety accountability prevents risk from being diluted among competing priorities.
What should organisations measure?
A safety dashboard dominated by incidents and harm will always look backwards. An SMS needs a balanced set of measures. Outcome information remains important, but it should sit alongside information about hazards, control reliability, reporting culture, operational conditions, implementation and learning.
Lagging indicators: harm, serious incidents, claims, complaints and avoidable outcome variation.
Leading indicators: hazards, near misses, good catches, emerging risks and changes in exposure.
Control measures: whether critical controls are present, used and effective in real work.
Culture and participation: speaking up, response to concerns, involvement and whether people receive feedback.
Improvement measures: whether actions were implemented, sustained and reduced the intended risk.
Equity measures: whether risks, access, experience or outcomes differ between groups or settings.
The 2026 Quality Strategy technical annex uses outcome, driver and process measures and, where possible, examines trends, variation and inequalities. That is a useful discipline for SMS measurement. A single monthly number can hide both deterioration and improvement. Boards need enough context to understand whether variation is meaningful and what decision it requires.
How does an SMS support CQC well-led expectations?
A safety management system should not be designed as an inspection project. A well-designed SMS can, however, make it easier for an organisation to demonstrate how leadership, culture, risk management, assurance and improvement operate in practice. That aligns closely with CQC’s well-led expectations, where the concern is whether leaders use effective governance and management systems, understand risk, performance and outcomes, and use that information to improve care.
CQC confirmed in March 2026 that it is moving from a single assessment framework towards four sector-specific frameworks for adult social care, mental health care, primary and community services, and hospitals. The five key questions remain safe, effective, caring, responsive and well-led. The draft approach uses key lines of enquiry and sector-specific rating characteristics, with judgements made directly at key-question level rather than through numerical scoring. These arrangements remain in development, so organisations should continue to use current published guidance while preparing for the direction of travel.
Why the connection is strongest under well-led
The draft hospital framework places strategic direction, workforce equity and culture, capable and compassionate leadership, governance, management of risk, performance and issues, partnerships and communities, and improvement, innovation and learning within well-led. These are not separate from safety management. They describe many of the conditions an effective SMS should create and sustain.
Strategic direction: safety policy and objectives connect organisational purpose with decisions about risk, resources and improvement.
Workforce equity and culture: psychological safety, just culture and attention to inequalities help staff contribute intelligence and challenge without fear.
Capable and compassionate leaders: clear accountability and suitable competence help leaders understand the safety implications of decisions.
Governance: clear roles, escalation routes, control ownership and management review connect frontline concerns with action and board assurance.
Management of risk, performance and issues: hazard identification, critical-control monitoring and balanced measures help identify deterioration early.
Partnerships and communities: shared risk management supports safer pathways where responsibility crosses services and organisations.
Improvement, innovation and learning: PSIRF learning, complaints, audit, staff concerns and patient experience can be combined and tested for impact.
From evidence collection to evidence of a working system
The benefit is not that an SMS creates a larger inspection evidence library. It should create evidence through ordinary management. A board should be able to follow a priority risk from identification, through ownership and control, to assurance, decision and improvement. Staff should be able to explain how they raise concerns and what happens next. Patients and families should be able to see how their experience influenced change. Leaders should be able to show not only that an action was completed, but whether it reduced risk or improved the outcome.
CQC’s current well-led framework already focuses on shared direction and culture, capable and inclusive leadership, freedom to speak up, governance and assurance, partnership, learning and improvement, environmental sustainability, and workforce equality, diversity and inclusion. The draft sector-specific approach changes the structure and language, but retains the expectation that organisations understand their services, act on reliable information and can show the effect of their decisions.
A practical CQC alignment test
Rather than creating a separate CQC workstream, organisations can test whether their SMS produces clear answers to the following questions. These prompts are based on published and draft CQC themes; they are not a substitute for the framework itself.
Can leaders describe the main current and emerging safety risks, including inequalities and risks at service boundaries?
Is there clear ownership of each priority risk and the controls intended to manage it?
Can the organisation show that controls are used and effective in real work, not simply documented?
Do staff, patients and families have accessible routes to raise concerns, and can they see how the organisation responded?
Does information reach the right decision-makers early enough to influence action?
Can leaders explain trade-offs between safety, effectiveness, experience, workforce, finance and access?
Are improvements implemented, measured and sustained, with evidence that they changed risk or outcomes?
Can the organisation demonstrate learning across services and with partners, rather than only within individual teams?
An SMS will not guarantee a particular CQC judgement. It can reduce the gap between what leaders believe is happening and what staff, patients, data and observation show. This strengthens regulatory readiness because the organisation is not assembling a retrospective account for inspection. It is using the same evidence to manage safety, improve quality and govern the organisation every day.
Governance is informed decision-making
At Promethean HD, we describe governance as informed decision-making. That definition is deliberately practical. A committee, report or assurance framework has value only if it helps the right people understand the position, make a sound decision and remain accountable for what happens next.
That framing is consistent with cross-sector guidance. NHS England’s Insightful Provider Board guidance asks whether leadership, culture, systems and processes use information effectively, with an emphasis on outcomes, curiosity and a problem-sensing culture rather than checklist governance. Charity Commission guidance requires trustees to be sufficiently informed, consider relevant factors, manage conflicts and record decisions. Companies House guidance reminds directors that professional support does not remove their legal responsibility. FCA and FRC governance arrangements similarly emphasise clear responsibility, risk oversight, internal control and transparent explanation.
For a board, an SMS should answer five decision questions:
What are our most significant safety risks, including those developing across organisational boundaries?
What controls are intended to keep people safe, and who is accountable for them?
What evidence tells us those controls work in practice, not merely on paper?
Where is assurance weak, contradictory or too remote from frontline reality?
What decision, investment, escalation or improvement is now required?
This is the point at which safety information becomes governance. A red-rated metric is not a decision. A completed investigation is not assurance. A risk register is not risk management. Leaders still need to test the evidence, understand trade-offs, decide what to do and check whether the decision changed the conditions of work.
Accountability, assurance and review
An SMS needs clear ownership at every level. The board remains accountable for the quality and safety of services. Executives need defined responsibilities for risks and controls. Operational teams need the authority and capability to manage hazards in the work. Specialist functions should support and challenge, but should not become the sole owners of safety.
Assurance should come from more than one source. Management information can show whether controls are being applied. Independent review, internal audit and external scrutiny can test whether that account is reliable. Patients, families and staff can reveal gaps that formal reporting misses. Differences between these sources should trigger curiosity, not averaging.
A practical healthcare SMS model
Healthcare organisations do not need to begin with a new department or another reporting structure. A better starting point is to join up what already exists and test whether the parts work together.
Define intent and accountability: Set a clear safety policy, board intent, executive accountability, risk ownership and escalation routes.
Build the safety-risk picture: Combine PSIRF intelligence with complaints, claims, mortality learning, audits, patient experience, workforce concerns, inequalities data and operational pressures.
Map critical controls: Identify the few controls that matter most for priority risks and describe how they should operate in real work.
Design proportionate assurance: Use observation, audit, outcome data, conversation, simulation and learning responses to test control effectiveness and detect drift.
Connect learning to improvement: Translate findings into feasible action, provide capacity, measure implementation and assess whether risk was reduced.
Strengthen culture and participation: Create psychologically safer routes for staff, patients and families to contribute, challenge and make sense of uncertainty.
Review the system: Use management review and board oversight to examine trends, trade-offs, gaps, emerging risks and the health of the SMS itself.
How to start without creating another programme
A sensible first step is a maturity review rather than a large launch. Map existing arrangements against the four SMS areas. Follow two or three priority risks through the system from identification to control, assurance, escalation and improvement. Speak with the people who deliver and receive care. Look for duplication, missing ownership, weak interfaces and information that arrives too late to influence a decision.
The result should be a small number of design priorities, not a long compliance action plan. Test changes in real settings, involve those who will use them and review whether they improve safety management. The system should remain proportionate to risk, organisational size and complexity. It should also be reviewed as services, technology, workforce and external conditions change.
Related Promethean HD reading
These related articles develop the links between safety management, PSIRF, weak signals, quality strategy and governance:
The real test: does the system help people act?
The useful idea within safety management systems is coherence. Leadership intent, operational risk, controls, assurance, learning, culture and improvement need to connect. In healthcare, those connections could help PSIRF move beyond the completion of learning responses, support the 2026 Quality Strategy and give boards a clearer basis for action.
The failure mode is easy to recognise: more forms, more meetings and more compliance language, with little change in how work is designed or risk is controlled. Good governance should do the opposite. It should be proportionate, curious, evidence-led and close enough to the work to understand what is really happening.
So the question for healthcare leaders is not, “Do we have an SMS?” It is, “Does our safety system help people recognise risk earlier, understand work honestly, make better decisions and improve care?”
How Promethean HD can help
Healthcare organisations rarely lack policies, committees, incident data or risk registers. The harder task is connecting them so that leaders can see where risk is changing, test whether controls work and demonstrate that learning is leading to improvement.
Promethean HD’s healthcare governance and transformation support combines independent assurance, human factors and practical implementation. We can help you review how PSIRF, risk, audit, quality improvement and board oversight work together, identify gaps or duplication, and develop a proportionate plan that strengthens safety and CQC well-led assurance.
References and further reading
Care Quality Commission. (2024). Governance, management and sustainability.
Care Quality Commission. (2026). Hospitals: Secondary and specialist care assessment framework [Draft].
Care Quality Commission. (2026). Our March update: Sector-specific assessment frameworks.
Care Quality Commission. (2024). Well-led assessment framework.
Charity Commission for England and Wales. (2024). Decision-making for charity trustees (CC27). GOV.UK.
Companies House. (2026). Being a company director. GOV.UK.
de Bell, S., Zhelev, Z., Bethel, A., Clarke, M., Anderson, R., & Thompson Coon, J. (2026). Implementation of safety management systems (SMS) in healthcare: A systematic review and international comparison. BMJ Open, 16(5), e107772. https://doi.org/10.1136/bmjopen-2025-107772
Financial Conduct Authority. (2025). DTR 7: Corporate governance.
Financial Reporting Council. (2024). UK Corporate Governance Code 2024.
Health Services Safety Investigations Body. (2023). Safety management systems: An introduction for healthcare.
Health Services Safety Investigations Body. (2025). Safety management: Accountability across organisational boundaries.
International Organization for Standardization. (2018). ISO 31000:2018 risk management—Guidelines.
International Organization for Standardization. (2018). ISO 45001:2018 occupational health and safety management systems—Requirements with guidance for use.
NHS England. (2019). The NHS patient safety strategy.
NHS England. (2024). The insightful provider board.
NHS England. (2026). Patient safety incident response standards (Version 1.3).
NHS England. (2026). Safety management systems: NHS England position statement.
NHS England & National Quality Board. (2026). Quality strategy for NHS-funded care in England.
Stroeve, S., Smeltink, J., & Kirwan, B. (2022). Assessing and advancing safety management in aviation. Safety, 8(2), Article 20. https://doi.org/10.3390/safety8020020
Zhelev, Z., de Bell, S., Bethel, A., Clarke, M., Anderson, R., & Thompson Coon, J. (2025). The implementation of safety management systems in healthcare: A systematic review and international comparison. Health and Social Care Delivery Research, 13(7), 1–70. https://doi.org/10.3310/QPLF8546
Comments