Human Factors, Ergonomics and Safe Clinical Systems

Introduction and Context

Healthcare is delivered by people working within complex technical, organizational and social systems. Although clinical knowledge and individual competence are essential, safe care also depends on how equipment, information, tasks, teams, environments and organizational policies are designed. Human factors is the discipline concerned with the interaction between people and the systems in which they work. Ergonomics applies knowledge of human capabilities and limitations to the design of work, tools and environments.

A human-factors approach does not excuse unsafe practice or remove professional accountability. Instead, it recognizes that errors are often predictable consequences of poorly designed systems, excessive workload, interruptions, unclear communication, inadequate supervision or unsuitable equipment. The central managerial question changes from “Who failed?” to “How did the system make this action more likely, and how can recurrence be prevented?”

In hospitals, human-factors thinking is relevant to medication administration, surgery, diagnostic testing, patient identification, infection prevention, emergency response, bed management, electronic health records and transitions of care. It is particularly important because healthcare involves high uncertainty, time pressure, vulnerable patients and multiple professional groups.

Learning Objectives

By the end of this chapter, the learner should be able to:

1. Explain cognition, attention, memory, fatigue, workload and situational awareness in clinical work.
2. Distinguish active failures from latent conditions and apply a systems approach to incidents.
3. Explain ergonomic principles for physical, cognitive and organizational work design.
4. Apply structured communication, teamwork, handoff, checklist and standardization methods.
5. Describe crew resource management and TeamSTEPPS principles.
6. Design a practical safety intervention using simulation, measurement and feedback.
7. Evaluate ethical, governance and implementation challenges in human-factors programmes.

1. Foundations of Human Factors and Ergonomics

1.1 Human factors as a systems discipline

Human factors examines the performance of individuals and teams in relation to their tools, tasks, environment and organization. It draws on psychology, physiology, engineering, design, sociology and management. The purpose is not to make humans behave like machines; it is to design systems that support reliable human performance while anticipating variability.

Ergonomics is commonly divided into three overlapping domains:

A safe clinical system has several characteristics: critical information is visible at the point of work; routine processes are standardized; high-risk actions have independent checks; staff can escalate concerns; equipment is usable; and learning from near misses is encouraged.

1.2 The systems perspective on error

The traditional “bad apple” model attributes incidents mainly to individual carelessness. A systems perspective recognizes several interacting levels:

• Patient factors: age, acuity, language, comorbidities and changing clinical condition.
• Task factors: complexity, ambiguity, interruptions and time pressure.
• Individual factors: knowledge, fatigue, stress, experience and physical capability.
• Team factors: communication, leadership, coordination and psychological safety.
• Work-environment factors: noise, lighting, layout, equipment and staffing.
• Organizational factors: policies, training, procurement, scheduling, culture and resource allocation.

James Reason’s “Swiss cheese” model describes multiple defensive layers, such as training, protocols, alarms, supervision and checks. Each layer may contain weaknesses. An incident occurs when weaknesses temporarily align, allowing a hazard to pass through the defenses. The model is useful because it directs attention to system conditions, but it should not be interpreted as a literal prediction model or as evidence that all incidents have the same number of causes.

Active failures are unsafe acts close to the patient, such as selecting the wrong medication or omitting a safety check. Latent conditions are system weaknesses that remain dormant until combined with other factors, such as confusing storage, inadequate staffing, similar packaging or poorly designed software. A fair investigation examines both.

A useful distinction is between slips, lapses, mistakes and violations:

• A slip is an execution error: the intention is correct but the action is wrong.
• A lapse is a memory or attention failure, such as omitting a step.
• A mistake is an incorrect plan based on inadequate knowledge or interpretation.
• A violation is a deliberate departure from a rule, which may be routine, situational or exceptional.

These categories require different responses. A slip may be reduced by better interface design, whereas a knowledge-based mistake may require training and decision support. A routine violation may indicate that a rule is unrealistic or operationally incompatible.

2. Cognition, Attention and Decision-Making

2.1 Attention and working memory

Human attention is selective and limited. Staff may miss a visible signal when attention is directed elsewhere, a phenomenon known as inattentional blindness. Change blindness occurs when a change is not noticed because attention is interrupted or information is presented poorly. Alarm overload is a clinical example: when many alarms occur, important alarms may be ignored or delayed.

Working memory holds only a limited amount of information for a short period. Interruptions, multitasking and anxiety reduce its effective capacity. Clinical systems should therefore externalize memory through checklists, prompts, whiteboards, medication records and standardized documentation. Such tools are not signs of incompetence; they are cognitive supports.

Long-term expertise helps clinicians recognize patterns rapidly, but expertise can also create risks. A familiar pattern may encourage premature closure, in which alternative diagnoses are not considered. Confirmation bias leads people to seek or interpret evidence in ways that support an initial belief. A deliberate diagnostic pause, review of contradictory evidence and invitation for another perspective can reduce these risks.

2.2 Dual-process thinking

Dual-process models distinguish rapid, pattern-based reasoning from slower, analytical reasoning. Rapid reasoning is efficient and often appropriate in familiar situations. Analytical reasoning is more effortful but important when a patient is deteriorating, the presentation is atypical or evidence conflicts.

Managers should not assume that slow reasoning is always superior. Excessive formal analysis can delay emergency action. The practical objective is to identify triggers for switching modes, such as unexplained deterioration, an unusual medication combination, repeated failed treatment or disagreement within the team.

2.3 Situational awareness

Situational awareness is commonly described in three stages:

1. Perception: noticing relevant information.
2. Comprehension: understanding what the information means.
3. Projection: anticipating what may happen next.

For example, a nurse notices increasing respiratory rate, understands that it may indicate deterioration and predicts that urgent review may be required. Situational awareness is shared across a team rather than located solely in one individual. A team may fail if information is held by one person and not communicated to others.

Practical methods include explicit monitoring plans, verbalizing concerns, shared mental models, structured rounds and “what-if” discussions. Situation displays should prioritize clinically meaningful information rather than presenting every available data point.

3. Fatigue, Workload and Resilience

3.1 Fatigue and performance

Fatigue may result from insufficient sleep, night work, long shifts, high emotional demand, illness or cumulative workload. It can impair attention, reaction time, working memory, judgment and communication. Fatigue-related risk is not simply an individual wellness issue; it is a patient-safety and workforce-management issue.

Controls may include forward-rotating shifts where feasible, protected breaks, appropriate staffing, limits on excessive overtime, fatigue reporting, rest facilities and procedures for transferring responsibility when a worker is not fit for duty. Policies must be applied without stigmatizing staff or encouraging concealment of fatigue.

3.2 Workload and interruptions

Workload includes the amount, complexity and time sensitivity of work. Underload can reduce vigilance; overload can cause omission, prioritization errors and loss of situational awareness. Workload is influenced by staffing, patient acuity, documentation requirements, interruptions and equipment reliability.

A simple operational indicator is task demand relative to available capacity:

A ratio greater than 1 indicates that demand exceeds available capacity, although this is a conceptual management indicator rather than a precise physiological measurement. The terms must be defined consistently, and capacity should account for skill mix, interruptions and time available. Managers should avoid treating a numerical ratio as a complete measure of safety.

Interruption management should distinguish harmful interruptions from necessary clinical communication. Possible controls include protected medication rounds, visual signals, designated communication channels, escalation rules and redesign of non-urgent notifications. The goal is not to eliminate communication but to make timing and priority explicit.

4. Ergonomic Design of Clinical Work

4.1 Physical ergonomics

Physical design should reduce awkward posture, excessive force, repetitive movement and unnecessary travel. Examples include height-adjustable beds, mechanical lifting aids, accessible supplies, appropriate lighting, anti-glare screens and well-positioned monitors. Safe patient handling is both a staff-safety and patient-safety intervention because musculoskeletal injury can reduce workforce availability and continuity of care.

A task assessment should examine reach distance, lifting frequency, load characteristics, floor condition, visibility, equipment brakes and the number of staff required. Equipment must be selected with the actual patient population and workflow in mind rather than based solely on purchase price.

4.2 Cognitive ergonomics

Cognitive design principles include:

• Use familiar language and consistent terminology.
• Group related information.
• Make important differences visually prominent.
• Prevent predictable errors where possible.
• Provide meaningful feedback after an action.
• Avoid excessive alerts and duplicate data entry.
• Place instructions at the point of use.
• Support recovery when an error occurs.

For example, a medication system should distinguish look-alike and sound-alike medicines, display dose and route clearly, require confirmation for high-risk selections and avoid alerting so frequently that clinicians override alerts automatically.

4.3 Organizational ergonomics

Organizational design includes staffing models, shift patterns, role clarity, escalation procedures, governance and coordination across departments. A technically excellent device will not improve safety if staff lack time to use it, if responsibilities are unclear or if procurement ignores maintenance and training.

The hierarchy of controls is useful in healthcare. Stronger controls redesign the system or physically prevent error; weaker controls depend more heavily on memory and vigilance.

No control is perfect. A barcode system, for instance, can fail because of unreadable labels, workarounds, poor connectivity or incorrect database information.

5. Communication, Teamwork and Handoffs

5.1 Communication as a safety control

Communication failures commonly involve missing information, unclear responsibility, incorrect interpretation or failure to confirm receipt. Effective communication is not merely the transfer of words; it is the creation of a shared understanding and an agreed action.

Structured methods reduce variation. SBAR provides a concise format:

• Situation: What is happening now?
• Background: What relevant history or context matters?
• Assessment: What do I think is happening?
• Recommendation: What action or response is needed?

ISBAR adds Identification at the beginning. Closed-loop communication requires the receiver to acknowledge the message, repeat critical information when appropriate and confirm completion. For example, a team leader may say, “Give 500 mg of the prescribed antibiotic now.” The receiver repeats the drug and dose, and later confirms administration.

5.2 Handoffs

A handoff transfers responsibility and information. It is a high-risk transition because information can be lost while accountability is ambiguous. A reliable handoff includes patient identification, current condition, risks, pending tasks, contingency plans, medication issues, allergies and the name of the responsible clinician.

A good handoff is interactive rather than a one-way recital. The receiver should have an opportunity to ask questions and read back critical details. Interruptions should be minimized, but urgent clinical developments must take priority.

5.3 Teamwork and psychological safety

Effective teams have a shared purpose, clear roles, mutual monitoring, backup behavior and a leader who supports speaking up. Psychological safety means that staff can raise concerns, ask questions or admit uncertainty without humiliation or retaliation. It does not mean that performance standards are absent.

Team leaders should conduct briefings before complex work, huddles when conditions change and debriefings after significant events. A briefing clarifies goals, roles, risks and resources. A huddle reassesses the plan. A debrief identifies what occurred, what went well, what was difficult and what should change.

6. Crew Resource Management and TeamSTEPPS

Crew resource management (CRM) originated in aviation and was adapted for healthcare. Its central principle is that safety depends on the effective use of all available resources, including people, information, equipment and time. CRM emphasizes leadership, followership, communication, workload management, decision-making, cross-checking and recovery from error.

Healthcare TeamSTEPPS programmes commonly organize teamwork skills around communication, leadership, situation monitoring, mutual support and team structure. Tools include SBAR, briefs, huddles, debriefs, check-backs, call-outs, CUS and the two-challenge rule.

• CUS: “I am Concerned; I am Uncomfortable; this is a Safety issue.”
• Two-challenge rule: A concern is stated at least twice; if ignored and danger remains, the person escalates through the chain of command.
• Call-out: Critical information is announced so the whole team can hear it.
• Check-back: The receiver repeats or confirms the message.
• Cross-monitoring: Team members observe one another for errors or changing risk.

These tools require adaptation to language, hierarchy, culture and clinical context. A script alone cannot create teamwork. Leaders must model listening, respond constructively and ensure that escalation produces action.

7. Checklists, Standardization and Simulation

7.1 Checklists

A checklist is a cognitive aid that supports completion of essential steps. It is not a substitute for competence or clinical judgment. Effective checklists are short, clearly worded, tested with users and integrated into workflow.

There are two broad types:

• Read–do checklists: the user reads each item and performs it immediately.
• Do–confirm checklists: the user performs a set of tasks and then verifies completion.

A checklist should identify its purpose, owner, timing, response to a failed item and documentation requirement. Poor checklists become long, redundant or disconnected from actual work. They may create false reassurance if teams treat checking as a ritual rather than a decision point.

7.2 Standardization and appropriate flexibility

Standardization reduces unnecessary variation in high-risk processes such as patient identification, blood administration, specimen labeling and emergency response. However, clinical care also requires adaptation. The safest approach is often “standardize the routine, identify permitted exceptions and require explicit justification for high-risk deviation.”

Forcing identical procedures in every context may create workarounds. Standard operating procedures should therefore be developed with frontline staff, tested in real settings and reviewed after near misses.

7.3 Simulation

Simulation allows teams to practise rare, dangerous or complex events without exposing patients to avoidable risk. It can assess technical skills, communication, leadership, equipment use and system readiness. Scenarios may include medication emergencies, deteriorating patients, difficult airway management, fire response or mass-casualty triage.

A robust simulation cycle includes needs assessment, learning objectives, scenario design, briefing, simulation, debriefing and evaluation. Debriefing should be psychologically safe and evidence-informed. The focus is on actions and system conditions, not humiliation. Findings should lead to changes in equipment, protocols, staffing or training rather than stopping at individual feedback.

8. Designing and Evaluating a Safe Clinical System

A practical improvement process begins with risk identification. Useful sources include incident reports, near misses, patient complaints, safety walk-rounds, direct observation, staff interviews, process mapping and audit data. A process map should show the actual workflow, including interruptions, workarounds and handoffs—not only the official policy.

A risk assessment can consider severity and likelihood, but numerical scores should not be treated as objective truth. Definitions, scales and evidence must be transparent. High-risk processes should receive stronger controls and senior oversight.

A human-factors intervention can follow these steps:

1. Define the safety problem and affected patients.
2. Observe work and involve staff from all relevant roles.
3. Identify hazards, recovery points and latent conditions.
4. Select controls that do not depend solely on memory.
5. Prototype and test the intervention in the real environment.
6. Train users and clarify accountability.
7. Measure implementation, outcomes and unintended consequences.
8. Revise, standardize and sustain the improvement.

Evaluation should include process, outcome and balancing measures. For example, a handoff intervention may measure completion of essential information, adverse events linked to transitions and the time burden imposed on staff. A reduction in reported incidents may reflect improved safety—or reduced reporting—so data should be interpreted with reporting culture and case mix in mind.

Applied Case: Medication Handoff in an Emergency Department

Background

The following is an illustrative case. An emergency department experienced repeated delays and occasional omissions when patients were transferred to inpatient units. The electronic record contained medication information, but clinicians relied on different screens and verbal summaries.

Problem

A patient receiving insulin and anticoagulant therapy was transferred during a busy evening period. The receiving nurse knew the patient’s diagnosis but did not receive the timing of the last insulin dose or the pending laboratory test. The omission was detected before harm occurred when the nurse reviewed the medication administration record.

Analysis

A review found several contributing conditions:

• Handoffs occurred at the bedside, telephone and electronic-record interfaces without a common standard.
• The sending clinician was frequently interrupted.
• The receiving unit assumed that “transfer complete” meant medication reconciliation was complete.
• The electronic record displayed current orders but not always the most recent administration time on the first screen.
• Staff were reluctant to delay transfer because of bed pressure.

The immediate near miss was a potential omission, but the deeper problem was an unreliable transition system. Blaming the sending nurse would not address the multiple vulnerabilities.

Approach and solution

The department introduced a brief standardized handoff using identification, current condition, allergies, high-risk medicines, last critical dose, pending results, escalation triggers and receiving clinician confirmation. High-risk medicines required a check-back. A five-minute protected handoff window was established for selected transfers, and the electronic record was modified to display last administration times more prominently. Nurses and doctors tested the process through simulation involving interruptions and deteriorating patients.

Team leaders used huddles during periods of unusually high patient flow. Staff were encouraged to use CUS language when a transfer lacked essential information. Compliance was audited through observation, while staff feedback was collected weekly.

Outcome

After implementation, completion of essential handoff elements improved and staff reported greater clarity about pending tasks. The organization also identified a new problem: the protected window was difficult during peak demand. Rather than abandoning the intervention, managers created an escalation rule for urgent transfers and adjusted staffing during predictable surges.

Learning points

1. Handoff reliability depends on both communication behavior and information-system design.
2. A checklist is effective only when linked to responsibility and action.
3. Simulation can reveal interruptions and workarounds that policy review misses.
4. Safety interventions require balancing measures, including workload and transfer delays.
5. Frontline involvement improves practicality and acceptance.

Ethical, Governance and Regulatory Considerations

Human-factors programmes must respect dignity, confidentiality and professional fairness. Incident investigations should protect learning while meeting legal reporting requirements. Patient and staff data used for observation, simulation or electronic monitoring must have an appropriate governance basis, access controls and retention policy.

A just culture distinguishes human error, at-risk behavior and reckless behavior, while recognizing that categories may be difficult to apply. Staff should not be punished for reporting near misses or for raising a good-faith safety concern. At the same time, deliberate concealment, substance impairment or knowingly dangerous conduct may require formal action.

Technology introduces additional governance issues. Electronic alerts, predictive models and AI decision-support systems can create automation bias, inequitable performance or unclear accountability. Users must know the purpose, limitations and escalation pathway of such systems. AI should support—not replace—clinical judgment, patient involvement and professional responsibility. Systems should be monitored for false positives, false negatives, bias, downtime and inappropriate reliance.

Contemporary Developments and Limitations

Current human-factors practice increasingly uses digital usability testing, patient-safety dashboards, wearable fatigue indicators, virtual simulation and learning health-system methods. Remote and hybrid care create new risks involving identity verification, digital exclusion, missing physical examination and fragmented responsibility. Cybersecurity is also a patient-safety issue when ransomware or system downtime interrupts medication, laboratory or communication processes.

Human-factors methods have limitations. Observation may alter behavior; incident data are affected by reporting culture; simulation may not reproduce real consequences; and interventions can shift rather than eliminate risk. Standardization may reduce flexibility, while excessive customization increases complexity. Measures such as checklist compliance can become targets that obscure actual reliability. Continuous review and triangulation of evidence are therefore essential.

Best-Practice Principles for Hospital Managers

• Design systems around real work, not idealized policy compliance.
• Involve patients, families and frontline staff in safety design.
• Prefer engineering and workflow controls over reminders alone.
• Make roles, escalation routes and handoff ownership explicit.
• Protect staff from excessive fatigue and unmanageable workload.
• Use standard communication tools while allowing clinically justified flexibility.
• Test interventions with simulation and direct observation.
• Measure outcomes, process reliability and unintended consequences.
• Encourage reporting and respond to concerns respectfully.
• Treat technology, data quality and downtime planning as safety responsibilities.
• Review whether a safety intervention remains effective as services change.

Chapter Summary

Human factors and ergonomics treat patient safety as a property of interactions among people, tasks, technologies and organizations. Cognition is limited by attention, memory, interruption and fatigue; therefore, safe systems externalize memory, reduce unnecessary complexity and make critical information visible. Situational awareness involves perception, comprehension and projection, and must be shared across the team.

A systems approach distinguishes active failures from latent conditions and supports fair, learning-oriented investigations. Physical, cognitive and organizational ergonomics improve the fit between work and human capability. Communication tools such as SBAR, check-backs, call-outs, huddles and structured handoffs create shared understanding and clarify responsibility. CRM and TeamSTEPPS provide practical methods for leadership, mutual support, speaking up and recovery from error.

Checklists, standardization and simulation are valuable when they are brief, user-tested and connected to action. They cannot replace judgment, resources or a supportive culture. Effective implementation requires observation of real work, frontline participation, measurement of outcomes and balancing measures, and attention to ethics, privacy, fairness and technology-related risks. For hospital managers, the central responsibility is to create clinical systems that anticipate human variability and make safe performance easier.

Key Terms

Human factors: Study of how people interact with tasks, tools, environments and organizations.

Ergonomics: Application of knowledge about human abilities and limitations to work design.

Active failure: Unsafe act occurring close to the patient.

Latent condition: Hidden system weakness that may contribute to an incident.

Slip: Execution error in which the intended plan is correct but the action is incorrect.

Lapse: Memory or attention failure leading to omission or incorrect action.

Mistake: Incorrect plan or judgment based on inadequate interpretation or knowledge.

Violation: Deliberate departure from a rule or procedure.

Situational awareness: Perception, comprehension and projection of relevant conditions.

Working memory: Limited mental capacity used to hold and manipulate information temporarily.

Cognitive workload: Mental demand imposed by tasks, information and decision-making.

Psychological safety: Belief that concerns and questions can be raised without humiliation or retaliation.

Handoff: Transfer of information, responsibility and accountability between caregivers or teams.

Closed-loop communication: Communication confirmed by acknowledgment, repetition or verification of completion.

Crew resource management: Approach to using people, information, equipment and time to support safe performance.

TeamSTEPPS: Team-training framework emphasizing communication, leadership, situation monitoring and mutual support.

Checklist: Structured cognitive aid used to support completion or verification of critical steps.

Simulation: Practice or assessment in a controlled environment that represents clinical work.

Just culture: Approach that supports learning from error while maintaining accountability for reckless conduct.

Automation bias: Excessive trust in an automated recommendation or system output.

Review Questions

Short Answer Questions

1. Define human factors and explain how it differs from individual clinical competence.
2. Distinguish a slip, lapse, mistake and violation, giving one healthcare example of each.
3. What are the three stages of situational awareness?
4. State four features of a reliable clinical handoff.
5. Explain the purpose of a check-back in team communication.

Long Answer Questions

1. Explain how the Swiss cheese model supports investigation of clinical incidents. Include active failures and latent conditions.
2. Discuss the effects of fatigue, interruptions and workload on patient safety and describe managerial controls.
3. Compare physical, cognitive and organizational ergonomics using hospital examples.
4. Explain how CRM and TeamSTEPPS principles can improve teamwork during an emergency.
5. Evaluate the strengths and limitations of checklists, standardization and simulation in healthcare.

Analytical / Application Questions

1. A surgical ward reports repeated omissions during evening handoffs. Design a human-factors improvement plan, including observation, intervention, training and evaluation measures.
2. Staff frequently override electronic medication alerts. Analyze possible system causes and propose a safer alert strategy without relying only on additional training.
3. During a high-demand shift, a nurse appears fatigued and a transfer is planned with incomplete information. Apply principles of workload management, psychological safety, structured communication and escalation to determine the safest response.

Multiple Choice Questions with Answers

Question 1

Which statement best describes a latent condition?

A. A deliberate act of reckless misconduct at the bedside

B. A hidden system weakness that may contribute to an incident

C. A patient’s unexpected response to treatment

D. A successful recovery from an error

Correct Answer: B. A hidden system weakness that may contribute to an incident

Question 2

Which sequence correctly represents the stages of situational awareness?

A. Projection, perception, comprehension

B. Comprehension, projection, perception

C. Perception, comprehension, projection

D. Memory, action, evaluation

Correct Answer: C. Perception, comprehension, projection

Question 3

A clinician intends to select one medicine but clicks a similarly placed neighboring medicine. This is best classified as a:

A. Slip

B. Lapse

C. Mistake

D. Routine violation

Correct Answer: A. Slip

Question 4

In SBAR communication, the letter R refers to:

A. Record

B. Recommendation

C. Response time

D. Risk classification

Correct Answer: B. Recommendation

Question 5

Which action is an example of closed-loop communication?

A. Leaving a written policy at the nursing station

B. Sending an unacknowledged text message

C. Giving an order and assuming it was understood

D. Repeating a critical instruction and confirming completion

Correct Answer: D. Repeating a critical instruction and confirming completion

Question 6

Which control generally depends least on individual memory and vigilance?

A. A poster reminding staff to check identity

B. Annual classroom instruction

C. An engineering interlock that prevents an unsafe selection

D. A verbal reminder from a colleague

Correct Answer: C. An engineering interlock that prevents an unsafe selection

Question 7

The primary purpose of a huddle is to:

A. Replace all formal clinical documentation

B. Reassess the plan when conditions or risks change

C. Assign blame after an incident

D. Eliminate the need for leadership

Correct Answer: B. Reassess the plan when conditions or risks change

Question 8

Which principle is central to crew resource management?

A. Only the most senior clinician should make decisions

B. Safety depends on using available people, information, equipment and time effectively

C. Rules should never be adapted to clinical context

D. Technical skill is more important than communication

Correct Answer: B. Safety depends on using available people, information, equipment and time effectively

Question 9

A checklist is most likely to improve safety when it is:

A. Long enough to include every possible action

B. Used without training or ownership

C. Brief, user-tested and linked to an action when an item fails

D. Designed only by senior administrators

Correct Answer: C. Brief, user-tested and linked to an action when an item fails

Question 10

Which response best reflects a just-culture approach to a near miss?

A. Punish the reporter to demonstrate zero tolerance

B. Ignore it because no patient was harmed

C. Investigate system conditions while distinguishing error from reckless conduct

D. Remove the involved worker from all clinical duties permanently

Correct Answer: C. Investigate system conditions while distinguishing error from reckless conduct