Owning a business is inherently risky, as you are accepting responsibility for many financial, social, environmental and clinical risk factors. Managing these risks is part of delivering clinical care because if your business fails, you will not be able to deliver clinical care to your practice’s patients.
Managing risk is also in your own interest, if you are to reap the rewards of being a business owner and taking on these risks. While an obvious reward of being the owner of a successful business includes increased income, other rewards include flexibility and autonomy, achievement of personal and professional goals, helping others to do achieve their personal and professional goals, and improving the health outcomes of your patients and the community.
How to identify and reduce risks
A risk management process helps you consistently identify, document and manage business risks. A common method of managing business risk is to:
- Identify risks for each area of your business (eg clinical, staff, finance, compliance, patients).
- Create a risk matrix (or one for each area of your business) showing the likelihood of each identified risk occurring and the severity of the impact it would have.
- Listing ways of mitigating your known risks, which can then be incorporated into your action plan.
Risk matrix
Map each risk onto a risk matrix like the one below, according to the likelihood of the event occurring and the severity of its impact if it was to occur. This lets you identify the rating of each risk (low, medium, high or extreme), and therefore identify the risks you most need to address.
Risk mitigation strategies
Categorise and list your business’s risks, and identify how you can reduce the likelihood of that risk.
For example:
Category and Risks
|
Mitigation Strategies
|
Staff
|
Loss of key clinical or admin staff |
- Provide flexible working arrangements
- Pay for professional development
- Hold regular meetings to involve them in decisions that affect them.
|
Inadequate knowledge of latest technologies |
- Engage outside IT expert to provide informal training and keep systems running smoothly
- Use SMS and website to keep patients informed of developments.
|
Finance
|
Loss of income |
- Purchases of more than $500 must be approved by two owners.
|
Increased costs |
- Build strong relationships with providers of consumables
- Negotiate for a longer lease with no increase in rent.
|
Patient
|
Patient complaints or legal action |
- Build strong relationships with patients
- Explain procedures and costs to patients
- Involve patients in decisions that affect their health outcomes
- Take out adequate professional indemnity insurance.
|
Loss of patient data |
- Have daily backups of data
- Have backups stored offsite (or in Cloud).
- Every three months, have IT specialist check backups are working and can be recovered
- Review systems annually and upgrade hardware and software if necessary
- Install generator to maintain electricity supply if power fails.
|
Regulatory compliance
|
Non-compliance with regulatory obligations |
- Engage accountant, business advisor, and legal practitioner with experience advising general practices.
- Meet regularly with each one to confirm ongoing compliance, or to learn about changed or new obligations.
|
Key resource
Insurance - Australian Government
Tips
- Seek advice from your MDO about your practice’s particular circumstances and insurance needs.
- Your personal MDO may be different to the practice’s MDO.
RACGP Standards
Criterion C3.1 – Business operation systems
C3.1C Our practice has a business risk management system that identifies, monitors, and mitigates risks in the practice.
View the standards >