Infection Prevention, Risk and Emergency Preparedness

Introduction and context

Hospitals are designed to restore health, yet they also bring together vulnerable patients, invasive procedures, antimicrobial-resistant organisms, hazardous substances, complex technologies and time-critical decisions. Infection prevention and control (IPC), enterprise risk management and emergency preparedness are therefore not separate administrative activities. Together they form a safety system that protects patients, staff, visitors, assets and continuity of essential services.

An effective hospital administration system must prevent avoidable infection, identify hazards before harm occurs, respond proportionately when incidents arise and learn from failures. This requires governance, reliable surveillance, competent personnel, adequate infrastructure, disciplined communication and continuous improvement. It also requires recognition that risk cannot be eliminated completely. The managerial task is to reduce risk to an acceptable level while maintaining access, quality, efficiency and ethical care.

This chapter uses an all-hazards perspective. It addresses routine healthcare-associated infection (HAI) prevention, surveillance, antimicrobial stewardship, occupational safety, biomedical-waste management, enterprise risk registers, emergency operations, disaster response and business continuity.

Learning objectives

By the end of this chapter, the learner should be able to:

1. Explain the chain of infection and apply the hierarchy of controls to hospital hazards.
2. Design the main elements of an IPC programme and interpret surveillance indicators.
3. Explain antimicrobial stewardship and occupational-health responsibilities.
4. Establish safe systems for segregation, treatment and disposal of biomedical waste.
5. Construct and prioritize an enterprise risk register.
6. Distinguish emergency preparedness, response, recovery and business continuity.
7. Evaluate an emergency scenario and recommend coordinated managerial action.
8. Discuss ethical, regulatory, technological and governance issues in safety management.

1. Infection prevention as a hospital-wide system

1.1 The chain of infection

Transmission generally requires a sequence: infectious agent, reservoir, portal of exit, mode of transmission, portal of entry and susceptible host. An intervention at any link can interrupt transmission. For example, hand hygiene reduces transfer through contact transmission; respiratory hygiene reduces spread from respiratory secretions; sterilization removes organisms from critical instruments; vaccination reduces host susceptibility; and isolation controls contact between source and susceptible persons.

The chain is a useful teaching model, but it should not be interpreted mechanically. Transmission is influenced by dose, environmental persistence, ventilation, immunity, device use, crowding, treatment and organizational behaviour. A hospital administrator should therefore combine standard precautions for all patients with transmission-based precautions when a particular route is suspected or confirmed.

1.2 Standard and transmission-based precautions

Standard precautions apply to every patient, regardless of diagnosis. They include risk assessment before care, hand hygiene, appropriate personal protective equipment (PPE), respiratory hygiene, safe injection practices, sharps safety, environmental cleaning, safe handling of linen and appropriate reprocessing of equipment. PPE is selected according to anticipated exposure, not habit: gloves do not replace hand hygiene, and masks do not protect against every aerosol hazard.

Transmission-based precautions supplement standard precautions. Contact precautions address organisms spread by direct or indirect contact; droplet precautions address larger respiratory particles over relatively short distances; and airborne precautions require controls such as appropriate ventilation and respiratory protection where airborne transmission is possible. Local policy must reflect current public-health guidance, available engineering controls and the pathogen involved.

1.3 The hierarchy of controls

The hierarchy of controls ranks interventions from generally most reliable to least reliable:

• Elimination: remove the hazard, such as discontinuing an unnecessary invasive device.
• Substitution: replace a hazardous material or process with a safer one.
• Engineering controls: isolate people from the hazard through ventilation, safety-engineered sharps, closed systems or physical barriers.
• Administrative controls: policies, training, staffing, rostering, signage, audits and immunization programmes.
• PPE: gloves, gowns, eye protection and respirators.

PPE is important but is the last line of defence because its effectiveness depends on selection, fit, availability, donning, doffing and user behaviour. A robust hospital therefore does not treat PPE distribution as an adequate substitute for safe design.

2. Governance and operational design of IPC

The governing body should approve an IPC policy, define accountability and review performance. A multidisciplinary IPC committee commonly includes medical, nursing, microbiology, pharmacy, environmental services, engineering, occupational health, quality and hospital administration representatives. An IPC team translates policy into practice through risk assessment, education, surveillance, outbreak investigation, audits and feedback.

Responsibilities should be explicit. Clinical leaders own safe practice in their units; laboratory services provide timely and reliable microbiological information; pharmacy supports antimicrobial surveillance; facilities management controls water, ventilation and maintenance risks; occupational health manages staff exposure and vaccination; and the administrator ensures resources, escalation and reporting.

A practical IPC programme contains:

1. written standards based on current evidence and law;
2. competency-based induction and refresher training;
3. surveillance linked to action thresholds;
4. reliable cleaning, disinfection and sterilization systems;
5. adequate water, sanitation, ventilation and hand-hygiene facilities;
6. occupational-health support;
7. outbreak preparedness and communication;
8. audit, feedback and corrective-action monitoring.

Policies should be short enough to use at the point of care. They should identify who acts, within what time, with which equipment and how compliance is verified.

3. Surveillance and interpretation

Surveillance is the systematic collection, analysis, interpretation and communication of health data for action. It is not merely counting infections. A useful surveillance cycle defines the event, identifies the population at risk, collects consistent data, analyses trends, communicates findings and evaluates whether interventions worked.

Important measures include incidence, prevalence, device-associated rates, surgical-site infection rates, antimicrobial consumption and hand-hygiene compliance. Rates must use an appropriate denominator. For example, device-associated infection is commonly expressed per 1,000 device-days:

The numerator is the number of qualifying infections during the period; the denominator is the total number of days patients were exposed to the device; 1,000 is a reporting multiplier. The measure is most useful when case definitions, ascertainment and device-day counting are consistent. Comparing hospitals without adjusting for patient acuity, device utilization and surveillance methods can be misleading.

For a proportion such as hand-hygiene compliance:

An opportunity is a predefined moment when hand hygiene is indicated. Observation may be affected by the Hawthorne effect, sampling bias and inconsistent definitions; therefore direct observation should be complemented by product-use data, interviews and process audits.

Worked example

A critical-care unit records 3 central-line-associated bloodstream infections over 1,500 central-line days. The rate is:

The result should be interpreted with the unit’s baseline, case mix, confidence in case finding and recent changes in device utilization. A single rate does not establish causation. A run chart or control chart, accompanied by clinical review, can help distinguish random variation from a sustained change.

Surveillance should lead to action. A rising rate may prompt review of insertion technique, maintenance bundles, device necessity, staffing, supply availability and laboratory reporting. Data should be returned to the staff who can change practice, not confined to a committee report.

4. Antimicrobial stewardship

Antimicrobial stewardship is a coordinated effort to promote appropriate antimicrobial selection, dose, route and duration, improve outcomes, reduce adverse effects and slow resistance. It is both a patient-safety and population-health responsibility.

Core interventions include:

• prospective review and feedback by prescribers, pharmacists and microbiologists;
• facility-specific treatment guidelines based on local susceptibility data;
• timely collection of cultures when clinically indicated;
• dose adjustment for renal or hepatic function;
• intravenous-to-oral conversion when appropriate;
• de-escalation or discontinuation when evidence permits;
• formulary controls for selected agents;
• monitoring of antimicrobial use, resistance and adverse events.

Stewardship must avoid two opposite errors: unnecessary treatment and unsafe undertreatment. Decisions should integrate clinical severity, likely source, microbiology, pharmacology, patient factors and treatment goals. Restriction systems work best when they provide rapid expert support rather than merely creating administrative delay.

Useful indicators include days of therapy, defined daily doses where appropriate, guideline concordance, culture turnaround time, de-escalation frequency and rates of selected resistant organisms. Measures must be interpreted carefully because a reduction in antibiotic use is not automatically beneficial if delayed treatment causes harm.

5. Occupational safety and exposure management

Healthcare workers face biological, chemical, ergonomic, radiological, psychosocial and violence-related hazards. Occupational safety begins with hazard identification and risk assessment, followed by controls, training, reporting and post-exposure care.

A complete programme includes vaccination according to occupational risk, respiratory protection where indicated, sharps-injury prevention, safe handling of chemicals and cytotoxic drugs, radiation controls, safe patient handling, fatigue management, violence prevention and confidential health services. Staff must be able to report exposure and near misses without fear of retaliation.

After a sharps injury or splash, the immediate response generally includes stopping safely, washing or flushing the exposed area, reporting promptly, documenting the event and obtaining urgent confidential risk assessment. Post-exposure testing, prophylaxis and follow-up depend on the agent, exposure and applicable guidance. Managers should avoid blame and investigate system causes such as overfilled sharps containers, recapping practices, rushed procedures or inadequate staffing.

Psychological safety is also operationally important. Bullying, stigma and fear of reporting suppress information needed to prevent harm. Just culture distinguishes human error, at-risk behaviour and reckless behaviour; it supports learning while retaining accountability for deliberate and serious violations.

6. Biomedical-waste management

Biomedical waste management protects patients, workers, the public and the environment. It requires segregation at the point of generation, appropriate containment, internal transport, temporary storage, treatment and final disposal. Mixing infectious or sharps waste with general waste increases cost and risk.

Typical categories include general non-hazardous waste, infectious waste, sharps, pathological waste, pharmaceutical waste, chemical waste, radioactive waste and certain pressurized containers. Exact categories, colour codes and treatment requirements depend on national law; a hospital must follow its jurisdiction rather than adopt a colour system without verification.

Key controls are:

• labelled, compatible and leak-resistant containers;
• puncture-resistant sharps containers placed close to the procedure site;
• no manual sorting of improperly segregated waste;
• defined collection routes and schedules;
• secure, ventilated and clean storage areas;
• trained and vaccinated waste handlers where indicated;
• documented transfer to authorized treatment or disposal providers;
• spill, needle-stick and transport-emergency procedures.

Treatment options may include autoclaving, approved chemical treatment, encapsulation or high-temperature technologies, depending on waste type and regulation. Incineration is not universally appropriate; poor operation can create hazardous emissions. Procurement decisions should consider environmental impact, maintenance capability, validation, emissions control and total lifecycle cost.

7. Enterprise risk management

Risk management is a continuous process of identifying hazards, estimating the likelihood and consequences of events, selecting controls, assigning ownership and monitoring residual risk. It should include clinical, operational, financial, legal, technological, reputational, environmental and workforce risks.

A risk register typically records the risk statement, causes, possible consequences, existing controls, inherent rating, further treatment, owner, due date, residual rating and assurance evidence. Risk statements should be written clearly: “Failure of emergency power may interrupt oxygen supply and critical care,” rather than “generator problem.”

A common qualitative matrix uses likelihood and impact categories. If numerical scoring is used, a simple model is:

The likelihood score and impact score must be defined in advance, for example on scales from 1 to 5. The product is an aid to prioritization, not an objective measurement of truth. It assumes that the two dimensions can be represented consistently and that decision-makers understand the scale. A low numerical score must not override a legal, ethical or catastrophic risk requiring immediate control.

Controls should follow the hierarchy of controls. Each high-priority risk needs a named owner, measurable treatment actions, a deadline and a review method. Risk registers fail when they become static lists. They should be reviewed after incidents, near misses, major changes, exercises and emerging threats.

Risk appetite and escalation

The board or governing authority defines risk appetite: the amount and type of risk the organization is willing to accept in pursuit of its objectives. Zero tolerance may be appropriate for certain behaviours, such as falsifying safety records, but is unrealistic for all clinical uncertainty. Escalation criteria should specify when a risk moves from departmental management to executive or governing-body attention.

8. Emergency preparedness and disaster management

An emergency is an event requiring action beyond routine operations or threatening life, property, service capacity or public confidence. A disaster exceeds the normal capacity of the affected organization or community and requires extraordinary coordination and resources. Definitions vary by jurisdiction, but the practical distinction is that disaster response requires scalable command and resource allocation.

Preparedness is a cycle:

1. hazard identification and vulnerability assessment;
2. prevention and mitigation;
3. planning and capability development;
4. training and exercises;
5. response;
6. recovery and improvement.

An all-hazards plan should cover infectious outbreaks, fire, flood, earthquake, mass-casualty incidents, utility failure, cyberattack, violence, hazardous-material release and supply disruption. Hazard-specific annexes add detail where necessary.

Incident command and coordination

An incident-management structure establishes one clear incident leader and functional responsibilities for operations, planning, logistics, finance/administration, safety, medical coordination and communications. The exact model should align with national arrangements. Unity of command reduces conflicting instructions; span of control should remain manageable; and functions may be combined in a small event but expanded as complexity increases.

The emergency operations centre supports coordination, while clinical teams continue patient care. It should maintain a common operating picture: what happened, what is threatened, what resources are available, what decisions are pending and what assumptions may be wrong. Situation reports should be concise, time-stamped and based on verified information.

Triage and surge capacity

Mass-casualty triage prioritizes patients according to urgency and available resources, not social worth. Protocols must be trained and adapted to the event. Surge capacity includes space, staff, supplies, systems and management arrangements. Expanding beds without oxygen, infection control, trained staff or essential medicines is not genuine capacity.

Hospitals should identify strategies for:

• immediate expansion of treatment areas;
• cancellation or postponement of elective activity;
• staff redeployment and fatigue protection;
• patient transfer and referral;
• additional oxygen, blood, medicines and PPE;
• morgue capacity and dignified decedent management;
• family assistance and public information.

9. Business continuity and recovery

Business continuity ensures that critical services continue at an acceptable level during disruption and return to normal or redesigned operation afterward. A business-impact analysis identifies essential functions, dependencies, maximum tolerable downtime, minimum staffing, critical records and recovery priorities.

Continuity planning should address electricity, water, oxygen, information systems, communications, transport, suppliers, laboratories, blood, food, security and staff availability. Plans need manual alternatives for electronic systems, offline contact lists, backup power testing, reciprocal-support agreements and preapproved procurement arrangements.

Recovery is more than reopening a building. It includes restoring services safely, supporting staff, addressing delayed care, documenting costs, repairing infrastructure, reviewing contracts, communicating with patients and implementing corrective actions. A “hot wash” immediately after an exercise or incident captures observations while memories are fresh; a later structured review determines which findings require policy, training or investment changes.

10. Technology, data and artificial intelligence

Electronic surveillance can integrate laboratory results, pharmacy data, device exposure, bed movement and environmental findings. Dashboards can display trends and trigger alerts, but automation does not eliminate the need for clinical validation. Poor data quality, duplicate records, delayed documentation and changing denominators can generate false alarms.

Artificial intelligence may support outbreak detection, demand forecasting, image analysis, staffing or supply prediction. However, models can reproduce historical bias, obscure reasoning and fail when conditions differ from training data. Governance should require defined purpose, validation, human oversight, cybersecurity, privacy protection, audit trails and a clear response to erroneous recommendations. AI should support—not replace—professional judgment and incident command.

Cybersecurity is also an infection and continuity issue when electronic prescribing, laboratory reporting, monitoring or access-control systems fail. Hospitals should maintain role-based access, backups, network segmentation, patching, phishing awareness and downtime procedures. Personal health information must be processed lawfully, minimally and securely.

11. Ethical, legal and regulatory considerations

Safety management involves competing duties. During scarcity, administrators must allocate resources fairly, protect staff, respect patient autonomy and communicate honestly. Confidentiality must be balanced with public-health reporting and emergency information sharing. Isolation should be proportionate, time-limited, legally authorized and accompanied by humane communication and essential support.

Regulatory duties may cover infection notification, occupational exposure, waste transport, water quality, fire safety, building standards, medicines, radiation, data protection and emergency reporting. The hospital should maintain a legal and accreditation obligations register, but compliance should be treated as a minimum baseline rather than the definition of quality.

Ethically sound emergency communication is timely, accurate, accessible and consistent. Leaders should acknowledge uncertainty, correct errors publicly and avoid stigmatizing patients, communities or staff. Documentation supports accountability, continuity and learning, but it must not become a substitute for action.

Applied case: respiratory outbreak and power instability

Background

This illustrative case concerns a 220-bed district hospital during a seasonal respiratory outbreak. The emergency department becomes crowded, two nurses test positive for a respiratory pathogen, oxygen consumption rises sharply and a storm damages the local electricity network. The hospital has a generator, but recent testing identified a fuel-transfer fault.

Problem

The hospital faces simultaneous infection-transmission risk, staff shortage, oxygen dependence, potential power loss and public anxiety. The risk register had listed generator failure as medium priority because no recent outage had occurred, while respiratory surge planning had focused mainly on bed numbers.

Analysis

The incident lead activates the emergency plan. The IPC team reviews case definitions, cohorting, ventilation, masking and staff-exposure procedures. Engineering confirms the generator fault and estimates available fuel. Operations calculates critical oxygen-dependent patients and identifies elective activity that can be postponed. Pharmacy reviews oxygen-related medicines and antimicrobial prescribing. Communications prepares a verified public message.

The hospital’s main failure was not the absence of a plan; it was fragmented planning. Infection control, utilities, staffing and clinical surge assumptions had not been tested together. The risk score understated the consequence of a common-cause event affecting both patient flow and infrastructure.

Approach and solution

The hospital establishes a unified incident structure, separates suspected and non-suspected patient streams, creates a respiratory assessment area with controlled airflow, reinforces source control and hand hygiene, and performs rapid staff exposure assessment. Non-urgent procedures are deferred. Patients requiring higher-level respiratory support are prioritized for transfer after confirming receiving capacity.

Engineering repairs the fuel-transfer fault, begins documented generator testing and arranges fuel resupply. Logistics verifies oxygen inventory and supplier contingencies. Human resources creates safe rosters with rest periods and a reserve staffing list. A downtime pack is issued in case registration and electronic prescribing fail. The communication team gives regular updates and provides staff with a confidential reporting channel.

Outcome

The power supply remains available, transmission is controlled without closing the hospital and no preventable oxygen interruption occurs. The post-incident review identifies the need for integrated exercises, a higher priority for common-cause risks, improved ventilation documentation, clearer transfer agreements and a minimum emergency-fuel standard.

Learning points

1. Risk is interconnected; separate departmental registers can conceal systemic threats.
2. Surge capacity depends on infrastructure, staff, supplies and governance, not beds alone.
3. Exercises should test realistic combinations of hazards.
4. Timely, transparent communication is an operational control.
5. Near misses and successful responses provide evidence for improvement, not grounds for complacency.

Challenges and limitations

IPC indicators may be affected by under-detection, inconsistent definitions and changes in testing. Risk matrices can create false precision and encourage attention to high scores while neglecting unfamiliar low-frequency hazards. Emergency plans may become obsolete when buildings, technology, suppliers or clinical practices change. Training may show theoretical knowledge without demonstrating performance under stress. Outsourcing waste, cleaning, laboratory or security services can create accountability gaps if contracts lack measurable standards and audit rights.

Resource constraints require prioritization, but “low resource” should not mean “low standard.” Administrators should use risk-based investment, local innovation and partnerships while protecting essential safety functions. Every control has costs and unintended consequences; for example, excessive isolation may reduce transmission but also delay care, increase distress and consume scarce space. Evaluation must therefore consider safety, equity, staff welfare, patient experience, environmental impact and financial sustainability.

Best-practice implementation checklist

A mature hospital can demonstrate that it has:

• governing-body oversight and named IPC, risk and emergency leaders;
• current policies linked to law and evidence;
• reliable hand hygiene, cleaning, sterilization and waste systems;
• surveillance definitions, denominators, thresholds and feedback;
• an antimicrobial stewardship team and prescribing review;
• vaccination, exposure management and psychological-safety mechanisms;
• a live enterprise risk register with owners and escalation rules;
• tested emergency plans, communication channels and incident command;
• business-impact analysis and downtime procedures;
• exercised arrangements for utilities, oxygen, staffing and suppliers;
• documented after-action learning and tracked corrective actions.

Chapter Summary

Infection prevention, risk management and emergency preparedness are integrated components of hospital governance. The chain of infection and hierarchy of controls explain how transmission can be interrupted, while standard and transmission-based precautions convert principles into daily practice. Surveillance requires consistent case definitions, valid denominators, interpretation and feedback. Antimicrobial stewardship protects individual patients and preserves effectiveness of medicines. Occupational-health systems protect workers through vaccination, engineering controls, exposure response and a just culture. Biomedical-waste safety depends on segregation, containment, authorized treatment and regulatory compliance.

Enterprise risk management identifies threats, assigns ownership and monitors residual risk, but numerical scores are aids rather than substitutes for judgment. Emergency management requires all-hazards planning, incident command, triage, surge capacity, communication and coordinated logistics. Business continuity protects critical functions through dependency analysis, downtime arrangements and recovery planning. Technology and AI can strengthen surveillance and forecasting only when data quality, privacy, cybersecurity, validation and human oversight are assured. Ethical leadership requires fairness, proportionality, transparency and respect for dignity. The central managerial lesson is that safety is created by reliable systems, tested relationships and continuous learning.

Key Terms

Antimicrobial stewardship: Coordinated action to optimize antimicrobial use and limit resistance and avoidable harm.

Business continuity: Capability to maintain and recover essential services during disruption.

Chain of infection: Sequence of agent, reservoir, exit, transmission, entry and susceptible host.

Common-cause failure: One event that disrupts multiple systems or controls simultaneously.

Device-days: Total number of days patients are exposed to a specified medical device.

Disaster: An event exceeding the normal capacity of the affected organization or community.

Enterprise risk management: Organization-wide identification, treatment and monitoring of risks.

Healthcare-associated infection: Infection acquired in association with healthcare delivery.

Incident command: Structured authority and coordination system used during an emergency.

Infection prevention and control: Policies and practices that prevent transmission and healthcare-related infection.

Just culture: Approach that supports learning from error while maintaining accountability for reckless conduct.

Likelihood: Estimated chance that a risk event will occur within a defined context and period.

Medical surge capacity: Ability to expand space, staff, supplies and systems to meet exceptional demand.

Personal protective equipment: Clothing or equipment designed to reduce exposure to hazards.

Residual risk: Risk remaining after existing or planned controls are applied.

Risk appetite: Amount and type of risk an organization is willing to accept.

Standard precautions: Infection-control measures applied to every patient regardless of diagnosis.

Surveillance: Systematic collection, analysis, interpretation and use of health data for action.

Transmission-based precautions: Additional precautions selected for suspected or confirmed transmission routes.

Biomedical waste: Waste arising from healthcare activities that may require special handling or treatment.

Review Questions

Short Answer Questions

1. What are the six links in the chain of infection?
2. Why is PPE considered the last level in the hierarchy of controls?
3. Define antimicrobial stewardship.
4. What is the purpose of a business-impact analysis?
5. State two essential features of a risk register.

Long Answer Questions

1. Explain how a hospital can design and govern an effective IPC programme.
2. Discuss the importance, limitations and interpretation of HAI surveillance rates.
3. Describe a comprehensive occupational-health and exposure-management system.
4. Explain the stages of emergency management from mitigation through recovery.
5. Discuss how business continuity planning protects essential hospital services.

Analytical / Application Questions

1. A surgical unit’s infection rate rises after a staffing change. Develop an investigation and corrective-action plan using surveillance, the hierarchy of controls and just-culture principles.
2. Construct a risk-register entry for failure of the hospital oxygen supply. Identify causes, consequences, existing controls, further treatment, owner and escalation criteria.
3. A flood closes the outpatient department while a respiratory outbreak is occurring. Design the first 24 hours of an integrated response, including IPC, triage, communications, staffing, logistics and continuity measures.

Multiple Choice Questions with Answers

Question 1

Which intervention is highest in the hierarchy of controls?

A. Providing gloves

B. Posting a warning sign

C. Eliminating an unnecessary invasive device

D. Conducting refresher training

Correct Answer: C. Eliminating an unnecessary invasive device

Question 2

A unit reports 4 device-associated infections over 2,000 device-days. What is the rate per 1,000 device-days?

A. 0.5

B. 2

C. 4

D. 8

Correct Answer: B. 2

Question 3

Which denominator is most appropriate for a device-associated infection rate?

A. Total hospital admissions

B. Total patient population in the country

C. Total device-days

D. Total number of staff

Correct Answer: C. Total device-days

Question 4

Which activity is central to antimicrobial stewardship?

A. Using the same antibiotic for every infection

B. De-escalating treatment when evidence permits

C. Avoiding all microbiological testing

D. Extending treatment automatically

Correct Answer: B. De-escalating treatment when evidence permits

Question 5

What is the safest location for a sharps container?

A. In a distant central store

B. Close to the procedure site

C. Inside a general waste room only

D. At the hospital entrance

Correct Answer: B. Close to the procedure site

Question 6

What is the main purpose of an enterprise risk register?

A. To replace all emergency plans

B. To list risks without assigning responsibility

C. To identify, prioritize, treat and monitor risks

D. To record only financial losses after incidents

Correct Answer: C. To identify, prioritize, treat and monitor risks

Question 7

Which statement best describes business continuity?

A. Closing all services during disruption

B. Maintaining and recovering essential services during disruption

C. Replacing infection control with insurance

D. Focusing only on rebuilding infrastructure

Correct Answer: B. Maintaining and recovering essential services during disruption

Question 8

What is a key benefit of unity of command during an emergency?

A. It eliminates the need for documentation

B. It reduces conflicting instructions

C. It permits unlimited span of control

D. It transfers all decisions to external agencies

Correct Answer: B. It reduces conflicting instructions

Question 9

Which statement about risk scores is most accurate?

A. They are exact measurements of danger

B. They remove the need for managerial judgment

C. They are aids to prioritization based on defined scales

D. They can override legal requirements

Correct Answer: C. They are aids to prioritization based on defined scales

Question 10

Which principle is most appropriate for hospital use of artificial intelligence in surveillance?

A. Automated outputs require no validation

B. Human oversight and data-quality controls remain necessary

C. Patient privacy is irrelevant during routine monitoring

D. Models should replace incident command

Correct Answer: B. Human oversight and data-quality controls remain necessary