The HVA Starts With the People, Not the Form

𝐓𝐡𝐞 𝐟𝐢𝐫𝐬𝐭 𝐬𝐭𝐞𝐩 𝐢𝐧 𝐜𝐫𝐞𝐚𝐭𝐢𝐧𝐠 𝐚 𝐦𝐞𝐚𝐧𝐢𝐧𝐠𝐟𝐮𝐥 𝐇𝐚𝐳𝐚𝐫𝐝 𝐕𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐀𝐬𝐬𝐞𝐬𝐬𝐦𝐞𝐧𝐭 𝐢𝐬 𝐧𝐨𝐭 𝐭𝐡𝐞 𝐟𝐨𝐫𝐦. 𝐈𝐭 𝐢𝐬 𝐭𝐡𝐞 𝐩𝐞𝐨𝐩𝐥𝐞 𝐢𝐧 𝐭𝐡𝐞 𝐫𝐨𝐨𝐦.

A Hazard Vulnerability Assessment is intended to help a healthcare organization understand which hazards are most likely to occur, how severely they could affect operations, and where the organization may be most vulnerable.

But the quality of the assessment depends heavily on who participates in the process.

An HVA completed by one person may satisfy a deadline. It may even produce a polished spreadsheet and a set of carefully calculated scores. But it is unlikely to capture the full operational impact of an emergency across a hospital.

Hospitals are complex environments. A single event can affect patient care, staffing, utilities, technology, access, supply chains, communications, infection prevention, security, and business operations at the same time.

No single department sees all of that.

That is why the HVA committee should be diverse in roles, experience, and operational perspective.

At a minimum, consider including representatives from:

▶️ Safety

▶️ Risk Management

▶️ Nursing, including the Emergency Department, Medical-Surgical units, and Intensive Care

▶️ Engineering and Facilities

▶️ Legal

▶️ Security or Public Safety

▶️ Environmental Services

▶️ Infection Prevention

▶️ Information Technology

▶️ Supply Chain

▶️ Administration and Operational Leadership

▶️ Physician Leadership, when available

▶️ An Executive Sponsor

Depending on the organization and the hazards being reviewed, it may also be valuable to include representatives from pharmacy, laboratory services, behavioral health, communications, human resources, emergency medical services, and community partners.

Why does this matter?

Because every area sees risk through a different operational lens.

Engineering may identify vulnerabilities involving generators, water systems, medical gases, heating and cooling, elevators, structural damage, or access to critical equipment.

Nursing may recognize that a utility failure is not simply an infrastructure issue. It may affect medication administration, patient monitoring, staffing ratios, documentation, treatment schedules, evacuation capabilities, and the ability to safely care for high-acuity patients.

Security may see threats involving workplace violence, uncontrolled access, crowd management, civil disturbance, family conflict, perimeter control, patient elopement, traffic congestion, or the protection of critical areas.

Environmental Services may identify problems involving waste removal, contaminated materials, linen availability, cleaning capacity, isolation rooms, and the ability to maintain a safe environment during an infectious disease event or utility interruption.

Information Technology may recognize the impact of communication failures, inaccessible electronic medical records, cyberattacks, network downtime, or the loss of systems used for clinical care and business operations.

Supply Chain may see vulnerabilities involving medications, oxygen, food, fuel, personal protective equipment, blood products, vendor access, and transportation delays.

Risk Management and Legal may identify concerns involving liability, documentation, patient rights, regulatory requirements, contractual obligations, and decisions made under emergency conditions.

Administration may see the broader effects on staffing, finances, continuity of operations, public messaging, resource allocation, and the organization’s ability to maintain services over time.

An executive sponsor brings another essential perspective. Leadership involvement helps ensure the HVA is not treated as an emergency management exercise conducted in isolation. It connects identified risks to organizational priorities, funding decisions, capital planning, staffing, and accountability.

That is the point of bringing these voices together.

A strong HVA is not created by one person filling out a form. It is built through honest discussion with people who understand how the hospital actually works.

The most valuable part of the process is often not the final numerical score.

It is the conversation behind the score.

Why does one department believe a hazard would have a moderate impact while another considers it catastrophic?

What assumptions are being made?

Which departments have backup processes, and which are depending on systems that may not be available?

How long could the organization operate without outside support?

What happens if staff cannot get to work?

What happens if the emergency affects the hospital and the surrounding community at the same time?

Where are the single points of failure?

These discussions expose vulnerabilities that may remain hidden when the assessment is completed quietly by one department.

They also help identify differences between what is written in a plan and what would actually happen during an emergency.

A hospital may have backup generators, but how long can they operate? Which systems are connected to emergency power? Is fuel delivery assured during a regional disaster?

The organization may have an evacuation plan, but are there enough staff, transportation resources, receiving facilities, and specialized equipment to move critical patients?

A downtime process may exist, but have frontline staff practiced using it recently?

A communication system may be available, but does it reach employees who are off duty, contracted personnel, physicians, patients, families, and community partners?

The HVA process should challenge these assumptions before an emergency does it for you.

Different perspectives also help the committee move beyond asking, “Could this happen?”

The better questions are:

What would fail first?

Who would be affected?

How quickly would the impact spread?

What resources would be required?

What dependencies could interrupt patient care?

What capabilities do we believe we have but have never fully tested?

What would recovery look like after the immediate response ends?

A thoughtful HVA should lead to more than a ranked list of hazards.

It should influence the Emergency Operations Plan, continuity strategies, annual training, drills and exercises, mitigation projects, equipment purchases, staffing discussions, vendor agreements, mutual-aid relationships, and leadership priorities.

It should help the organization decide where limited time, attention, and resources will have the greatest impact.

The form is important. The scoring methodology is important. Documentation is important.

But none of those can replace informed people having a candid conversation about risk.

The first step in creating a meaningful HVA is not opening the spreadsheet.

It is making sure the right people are sitting around the table.

Because different perspectives reveal the true consequences of an event.

And that is where real emergency planning begins.