{"text_format":"1","workbook":"xlsx","n_sheets":16,"sheets":["Introduction","Contents","Document Management","Risk Matrix","Hazard Table","Hazard List","H-01","H-02","H-03","H-04","Glossary","Potential Causes","Controls","Hazard summary Mindmap","Reference","Removed Hazard Causes Controls"],"not_rendered":{"charts":0,"images":0,"macros":1,"external_links":0,"defined_names":19,"comments":5,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Introduction","index":0,"n_rows":15,"n_cols":10,"rows_kept":15,"cut":false,"hidden":false,"merged":[[5,2,5,4],[5,5,5,6],[8,1,8,6],[10,1,10,6],[0,9,0,10],[1,1,1,6],[2,1,2,6],[3,1,3,6],[4,2,4,4],[4,5,4,6],[0,1,0,6]]}
[null,"Introduction",null,null,null,null,null,null,null,"Contents"]
[null,"\nThe Hazard Log is a core part of the*** Name of CSC*** Clinical Safety Case File. Clinical Safety Case reviews consider intended use and reasonably foreseeable misuse. These reviews, alongside the Hazard Log culminate in a Clinical Safety Case Report, delivered at a point in time, to the ***Commissioning Body ***. This Report can then be used as a tool for the ongoing mitigation and management of any risks of the Digital Solution. As such the Hazard Log represents areas of joint and individual responsibility."]
[null,"Hazard Log Scope \n\nThe process of generating search specifications and codesets by the Primary Care Informatics (PCI) team to support vaccination and non-vaccination programmes is in scope. \nThese processes by Albasoft are in scope: \n- Use of search specifications and codesets from PCI to generate patient cohorts eligible for health programmes. \n- Delivery of this data to Public Health Scotland (PHS)  \n \nThe focus is on data obtained from general practice records (GP IT systems)."]
[]
[null,"Product ","Description ",null,null,"Manufacturer "]
[null,"**Product Name** ","**Product Description**",null,null,"**Manufacturer Details **"]
[]
[null,"Hazard Log Guidance "]
[null,"The completed Hazard Log should be reviewed together with the respective Clinical Safety Case Report to fully appreciate the service components, intended use, reasonably foreseeable misuse and clinical safety scope. The ultimate aim of the Hazard Assessment is to remove any unacceptable patient safety risks, and to implement risk Controls to reduce the residual risk to as low as reasonably practicable (ALARP). \n\nThis Hazard Log includes a number of potential Causes and Controls against each identified Hazard. It is continually updated following the assessment of live service incidents, new and enhanced functionality, as well as End-User feedback. \n\nThe Residual Risk Rating of each Hazard within this Hazard Log is only valid if the Controls are implemented and maintained through regular review and monitoring. "]
[null,"How To Read The Hazard Log "]
[null,"The Hazard Log contains **Number of Hazards** identified hazards, an overview of these are provided as a mind map in the Hazard Summary worksheet.  Each Hazard is detailed in a separate worksheet with the related Causes of the hazard and the Controls to mitigate the Hazard. \n\nEach Hazard also contains an initial evaluation score as well as detailed justifications of the rationale used for evaluating. \n\nThere are also master lists of categorised Causes and Controls. \n\nThe existing Controls are colour coded in the context of individual Hazards and Causes, where Green is used for strong controls, Amber for medium controls and yellow is used to indicate weaker controls. Controls listed as ‘Potential’ have not been considered in the current scoring but represent mitigation opportunities to further reduce the overall Hazard evaluation. Any Potential Controls that are the implemented will be noted as ‘Additional’ Controls and the relevant Hazard will be re-evaluated. \n\nKey to colours. Coloured cells have been used in this document to highlight subclasification of controls. To assist with indentification, both control strength and control type are described using the following colours:"]
[null,"Control Strength",null,null,"Control Type"]
[null,null,"Strong Control",null,null,"Existing Control"]
[null,null,"Medium Control",null,null,"Additional Control"]
[null,null,"Weak Control",null,null,"Potential Control"]

{"sheet":"Contents","index":1,"n_rows":21,"n_cols":3,"rows_kept":21,"cut":false,"hidden":false,"merged":[]}
[]
[]
["Contents"]
[]
["Introduction"]
["Document Management"]
["Risk Matrix"]
["Hazard Summary"]
["Hazard List"]
["Potential Causes"]
["Controls"]
["Hazard Table"]
["Removed Hazards Causes & Controls"]
["Reference"]
["Key"]
["Glossary"]
[null,"Hazard Number","Hazard description"]
[null,"H-01","Malicious misuse. "]
[null,"H-02","Reasonably foreseeable misuse."]
[null,"H-03","**Hazard 03 Name **"]
[null,"H-04","**Hazard 04 Name **"]

{"sheet":"Document Management","index":2,"n_rows":40,"n_cols":11,"rows_kept":40,"cut":false,"hidden":false,"merged":[[7,2,7,4],[22,0,22,1],[34,1,34,2],[36,1,36,2],[0,10,1,11],[30,0,30,1],[27,0,27,1],[3,2,3,4],[4,2,4,4],[5,2,5,4],[6,2,6,4],[13,0,13,1],[18,0,18,1],[23,0,23,1],[28,0,28,1],[29,0,29,1],[19,0,19,1],[20,0,20,1],[21,0,21,1],[14,0,14,1],[15,0,15,1],[16,0,16,1],[17,0,17,1],[37,1,37,2],[38,1,38,2],[39,1,39,2],[33,1,33,2],[35,1,35,2]]}
["Document Management",null,null,null,null,null,null,null,null,null,"Contents"]
[]
["Revision History"]
["Version","Date","Summary of changes"]
[]
[]
[]
[]
[]
[]
["Reviewers"]
["This document must be reviewed by the following people:"]
["Reviewer Name",null,"Title / Responsibility","Date","Version"]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
["Approved by"]
["This document must be approved by the following people:"]
["Name",null,"Title","Date","Version"]
[]
[]
[]
[]
["Related Documents"]
[1]
[2]
[3]
[4]
[5]
[6]
[7]

{"sheet":"Risk Matrix","index":3,"n_rows":37,"n_cols":12,"rows_kept":37,"cut":false,"hidden":false,"merged":[[36,2,36,6],[31,2,31,3],[32,2,32,3],[33,2,33,3],[34,2,34,3],[31,4,31,6],[32,4,32,6],[33,4,33,6],[34,4,34,6],[35,2,35,6],[26,3,26,7],[27,9,27,10],[28,9,28,10],[30,9,30,10],[16,9,19,9],[18,3,18,7],[19,3,19,7],[20,9,23,9],[25,3,25,7],[23,3,23,7],[24,3,24,7],[30,2,30,3],[29,2,29,3],[29,4,29,6],[30,4,30,6],[0,10,1,11],[4,1,8,1],[4,9,5,9],[4,10,5,10],[4,11,5,11],[6,9,8,9],[7,10,8,10],[7,11,8,11],[9,9,15,9],[10,3,10,7],[10,10,13,10],[10,11,13,11],[22,3,22,7],[14,3,14,7],[15,3,15,7],[16,3,16,7],[17,3,17,7]]}
["Risk Matrix",null,null,null,null,null,null,null,null,null,"Contents"]
[]
[]
[null,null,null,null,"Risk Score Calculation Lookup",null,null,null,null,null,"Severity Category"]
[null,"Likelihood","Very High",3,4,4,5,5,null,"Severity Classification","Interpretation","Number of Patients Affected"]
[null,null,"High",2,3,3,4,5]
[null,null,"Medium",2,2,3,3,4,null,"Catastrophic","Death","Multiple"]
[null,null,"Low",1,2,2,3,4,null,null,"Permanent life-changing incapacity and any condition for which the prognosis is death or permanent life-changing incapacity; severe injury or severe incapacity from which recovery is not expected in the short term","Multiple"]
[null,null,"Very Low",1,1,2,2,3]
[null,null,null,"Minor","Significant","Considerable","Major","Catastrophic",null,"Major ","Death","Single"]
[null,null,null,"Severity",null,null,null,null,null,null,"Permanent life-changing incapacity and any condition for which the prognosis is death or permanent life-changing incapacity; severe injury or severe incapacity from which recovery is not expected in the short term","Single"]
[]
[]
[null,null,null,null,"Likelihood Category"]
[null,null,"Likelihood Category","Interpretation",null,null,null,null,null,null,"Severe injury or severe incapacity from which recovery is expected in the short term","Multiple"]
[null,null,"Very high","Certain or almost certain; highly likely to occur",null,null,null,null,null,null,"Severe psychological trauma","Multiple"]
[null,null,"High","Not certain but very possible; reasonably expected to occur in the majority of cases",null,null,null,null,null,"Considerable ","Severe injury or severe incapacity from which recovery is expected in the short term","Single"]
[null,null,"Medium","Possible",null,null,null,null,null,null,"Severe psychological trauma","Single"]
[null,null,"Low","Could occur but in the great majority of occasions will not",null,null,null,null,null,null,"Minor injury or injuries from which recovery is not expected in the short term","Multiple"]
[null,null,"Very low","Negligible or nearly negligible possibility of occurring",null,null,null,null,null,null,"Significant psychological trauma","Multiple"]
[null,null,null,null,null,null,null,null,null,"Significant ","Minor injury or injuries from which recovery is not expected in the short term","Single"]
[null,null,null,null,"Risk Score Outcome",null,null,null,null,null,"Significant psychological trauma","Single"]
[null,null,5,"Unacceptable level of risk",null,null,null,null,null,null,"Minor injury from which recovery is expected in the short term","Multiple"]
[null,null,4,"Mandatory elimination of hazard or addition of control measure to reduce risk to an acceptable level",null,null,null,null,null,null,"Minor psychological upset; inconvenience","Multiple"]
[null,null,3,"Undesirable level of risk. Attempts should be made to eliminate the hazard or implement control measures to reduce risk to an acceptable level. Shall only be acceptable when further risk reduction is impractical",null,null,null,null,null,"Minor ","Minor injury from which recovery is expected in the short term; minor psychological upset; inconvenience; any negligible consequence","Single"]
[null,null,2,"Acceptable where cost of further reduction outweighs benefits gained or where further risk reduction is impractical"]
[null,null,1,"Acceptable, no further action required",null,null,null,null,null,null,"Control Strength "]
[null,null,null,null,null,null,null,null,null,"The manufacturer shall use one or more of the following risk control options in the priority order listed:",null,"Strength"]
[null,null,"Example of five semi-quantative probability levels",null,null,null,null,null,null,"a) inherently safe design and manufacture;",null,"Strong"]
[null,null,"Common Terms",null,"Examples of probability range",null,null,null,null,"b) protective measures in the medical device itself or in the manufacturing process;",null,"Medium"]
[null,null,"Frequent",null,"³10-3",null,null,null,null,"c) information for safety and, where appropriate, training to users.",null,"Weak"]
[null,null,"Probable",null,"<10-3 and ³10-4",null,null,null,null,"Adapted from ISO 14971:2019"]
[null,null,"Occasional",null,"<10-4 and ³10-5"]
[null,null,"Remote",null,"<10-5 and ³10-6",null,null,null,null,"Controls can reduce the severity of harm and/or the probability of the occurrence."]
[null,null,"Improbable",null,"<10-6",null,null,null,null,"If it is determined a control is not practicable, then a benefit-risk analysis must be conducted for the residual risk."]
[null,null,"PD CEN ISO/TR 24971:2020"]
[null,null,"ISO/TR 24971:2020"]

{"sheet":"Hazard Table","index":4,"n_rows":46,"n_cols":14,"rows_kept":46,"cut":false,"hidden":false,"merged":[[40,7,41,7],[42,3,43,3],[25,6,26,6],[25,7,26,7],[42,7,43,7],[42,6,43,6],[36,4,37,4],[36,5,37,5],[36,6,37,6],[36,7,37,7],[38,7,39,7],[45,3,45,7],[34,1,43,1],[34,3,35,3],[34,4,35,4],[34,5,35,5],[34,6,35,6],[34,7,35,7],[36,2,37,2],[36,3,37,3],[40,3,41,3],[40,4,41,4],[40,5,41,5],[40,6,41,6],[42,2,43,2],[42,4,43,4],[42,5,43,5],[38,2,39,2],[38,3,39,3],[38,4,39,4],[38,5,39,5],[38,6,39,6],[23,7,24,7],[23,2,24,2],[23,4,24,4],[23,3,24,3],[23,5,24,5],[23,6,24,6],[34,2,35,2],[30,3,30,7],[27,2,28,2],[27,3,28,3],[27,4,28,4],[27,5,28,5],[27,6,28,6],[27,7,28,7],[19,7,20,7],[21,2,22,2],[8,17,9,17],[8,18,9,18],[8,19,9,19],[11,15,11,19],[19,6,20,6],[8,14,9,14],[8,15,9,15],[8,16,9,16],[21,7,22,7],[21,6,22,6],[21,5,22,5],[21,4,22,4],[21,3,22,3],[19,1,28,1],[19,2,20,2],[19,3,20,3],[19,4,20,4],[19,5,20,5],[25,3,26,3],[25,4,26,4],[25,5,26,5],[3,16,4,16],[3,17,4,17],[3,18,4,18],[3,19,4,19],[4,1,4,4],[3,15,4,15],[5,1,5,4],[5,14,6,14],[6,1,6,4],[0,13,1,14],[2,1,2,4],[3,1,3,4],[3,13,9,13],[3,14,4,14]]}
["Hazard Tables",null,null,null,null,null,null,null,null,null,null,null,null,"Contents"]
[]
["Hazard","Hazard Name",null,null,null,"Initial consequence","Initial likelihood","Initial risk score","Residual consequence","Residual likelihood","Residual risk score","Initial vs Residual Score Change"]
["H-01",{"$f":"'Hazard List'!B2","v":"Malicious misuse. "},null,null,null,{"$f":"'H-01'!B12","v":"Major"},{"$f":"'H-01'!C12","v":"Low"},{"$f":"'H-01'!D12","v":3},{"$f":"'H-01'!F12","v":"Major"},{"$f":"'H-01'!G12","v":"Low"},{"$f":"'H-01'!H12","v":3},"No change"]
["H-02",{"$f":"'Hazard List'!B3","v":"Reasonably foreseeable misuse."},null,null,null,{"$f":"'H-02'!B12","v":"Major"},{"$f":"'H-02'!C12","v":"Low"},{"$f":"'H-02'!D12","v":3},{"$f":"'H-02'!F12","v":"Major"},{"$f":"'H-02'!G12","v":"Low"},{"$f":"'H-02'!H12","v":3},"No change"]
["H-03",{"$f":"'Hazard List'!B4","v":"**Hazard 03 Name **"},null,null,null,{"$f":"'H-03'!B12","v":"Major"},{"$f":"'H-03'!C12","v":"Low"},{"$f":"'H-03'!D12","v":3},{"$f":"'H-03'!F12","v":"Major"},{"$f":"'H-03'!G12","v":"Low"},{"$f":"'H-03'!H12","v":3},"No change"]
["H-04",{"$f":"'Hazard List'!B5","v":"**Hazard 04 Name **"},null,null,null,{"$f":"'H-04'!B12","v":"Major"},{"$f":"'H-04'!C12","v":"Medium"},{"$f":"'H-04'!D12","v":3},{"$f":"'H-04'!F12","v":"Major"},{"$f":"'H-04'!G12","v":"Medium"},{"$f":"'H-04'!H12","v":3},"No change"]
[]
[]
[1,null,null,null,null,null,null,{"$f":"COUNTIF(H4:H7,\"1\")","v":0},null,null,{"$f":"COUNTIF(K4:K7,\"1\")","v":0}]
[2,null,null,null,null,null,null,{"$f":"COUNTIF(H4:H7,\"2\")","v":0},null,null,{"$f":"COUNTIF(K4:K7,\"2\")","v":0}]
[3,null,null,null,null,null,null,{"$f":"COUNTIF(H4:H7,\"3\")","v":4},null,null,{"$f":"COUNTIF(K4:K7,\"3\")","v":4}]
[4,null,null,null,null,null,null,{"$f":"COUNTIF(H4:H7,\"4\")","v":0},null,null,{"$f":"COUNTIF(K4:K7,\"4\")","v":0}]
[5,null,null,null,null,null,null,{"$f":"COUNTIF(H4:H7,\"5\")","v":0},null,null,{"$f":"COUNTIF(K4:K7,\"5\")","v":0}]
[]
["Total",null,null,null,null,null,null,{"$f":"SUM(H10:H14)","v":4},null,null,{"$f":"SUM(K10:K14)","v":4}]
[]
[]
[null,null," Initial risk scores for the 4 hazards identified"]
[null,"Likelihood ","Very High"]
[]
[null,null,"High"]
[]
[null,null,"Medium",null,null,null,"H-02"]
[]
[null,null,"Low",null,null,null,"H-01\nH-03\nH-04"]
[]
[null,null,"Very Low "]
[]
[null,null,null,"Minor ","Significant ","Considerable ","Major ","Catastrophic "]
[null,null,null,"Severity"]
[]
[]
[null,null," Residual risk scores for the 4 hazards identified"]
[null,"Likelihood ","Very High"]
[]
[null,null,"High"]
[]
[null,null,"Medium",null,null,null,"H-02"]
[]
[null,null,"Low",null,null,null,"H-01\nH-03\nH-04"]
[]
[null,null,"Very Low "]
[]
[null,null,null,"Minor ","Significant ","Considerable ","Major ","Catastrophic "]
[null,null,null,"Severity"]

{"sheet":"Hazard List","index":5,"n_rows":5,"n_cols":5,"rows_kept":5,"cut":false,"hidden":false,"merged":[]}
["No","Hazard name","Category","Sub-category","Priority (HML)"]
["H-01","Malicious misuse. ","IG and Security"]
["H-02","Reasonably foreseeable misuse.","Guidance and Training"]
["H-03","**Hazard 03 Name **","Technical"]
["H-04","**Hazard 04 Name **","Data & Quality"]

{"sheet":"H-01","index":6,"n_rows":22,"n_cols":11,"rows_kept":22,"cut":false,"hidden":false,"merged":[[9,14,9,15],[12,1,12,3],[12,5,12,6],[22,0,22,7],[17,5,17,6],[0,0,0,1],[0,2,0,7],[4,0,4,1],[4,2,4,7],[5,0,5,1],[5,2,5,7],[6,0,6,1],[6,2,6,7],[7,4,7,5],[9,0,9,7],[13,2,13,7],[14,0,14,1],[14,2,14,7],[7,0,7,1],[0,8,1,9],[1,0,1,1],[1,2,1,7],[3,0,3,1],[3,2,3,7],[13,0,13,1],[19,1,19,3],[15,12,15,13],[15,1,15,7],[16,0,16,7],[17,1,17,3],[19,5,19,6],[18,1,18,3],[18,5,18,6]]}
["Hazard ID ",null,"H-01",null,null,null,null,null,"Contents"]
["Hazard Name:",null,{"$f":"IF(ISBLANK(C1),\"\",VLOOKUP(C1,'Hazard List'!A2:B47,2))","v":"Malicious misuse. "}]
[]
["Hazard Summary",null,"Details"]
["CATEGORY",null,{"$f":"'Hazard List'!C4","v":"Technical"}]
["SUB CATEGORY"]
["HAZARD DESCRIPTION",null,"Intentional attempts to misuse, disrupt or alter the function of digital solution in a way not intended by the manufacturer."]
["Date:",null,"29/02/2024",null,"Latest modification Date:",null,"2024-03-04"]
[]
["Clinical Risk Assessment"]
[null,"Initial Consequence","Initial Likelihood","Initial Clinical Risk Score",null,"Residual Consequence","Residual Likelihood","Residual Clinical Risk Score"]
[null,"Major","Low",{"$f":"IF(OR(ISBLANK(B12),ISBLANK(C12)),\"\",INDEX('Risk Matrix'!$D$5:$H$9,_xlfn.XMATCH(C12,'Risk Matrix'!$C$5:$C$9,0),_xlfn.XMATCH(B12,'Risk Matrix'!$D$10:$H$10,0)))","v":3},null,"Major","Low",{"$f":"IF(OR(ISBLANK(F12),ISBLANK(G12)),\"\",INDEX('Risk Matrix'!$D$5:$H$9,_xlfn.XMATCH(G12,'Risk Matrix'!$C$5:$C$9,0),_xlfn.XMATCH(F12,'Risk Matrix'!$D$10:$H$10,0)))","v":3}]
[null,null,null,null," "]
["Potential Clinical Impact",null,"** Example Clinical Impact Below** \nPatients who are receive a medical intervention that they do not need may experience adverse effects (mild or severe) and/or allergic reactions. Examples include myocarditis with the Covid-19 vaccination and allergic reactions such as anaphylaxis which in extreme cases, which can result in death. This is particularly important if patients have a known contraindication or allergy to a vaccine and are then erroneously included in a cohort. Additionally, at a minimum, patients are inconvenienced and healthcare resources are wasted (vaccine resources, staff time).\n\nPatients who are missed from the vaccination cohort data may not receive a vaccine that they are eligible for. These patients usually have a higher risk of contracting certain potentially preventable infectious diseases due to eg. a compromised immune system. They are also more likely to suffer complications if they become ill and consequences could involve significant morbidity and death. \n\nDelay in receiving correct cohort data could lead to delayed vaccination which in turn could lead increased incidence of infectious disease and/or death in the population.\n \nPatient mental health adversely affected by not receiving timely accurate information regarding their vaccination.\n \nUnauthorised access to transient Patient Identifiable Information (PII), leading to patient psychological distress and adverse physical stress.\n \nUndermining of patient confidence in vaccination programme, resulting in reduced uptake of vaccine opportunities, leading to increased incidence of infectious disease in the population.\n\n\n\n\n"]
["Justification",null,"** Example Justification below** \nThe CSC team felt that the clinical impact would likely be major due to the fact that malicious misuse could result in incorrect cohort data leading to patients being erroneously included/excluded from vaccination callup. This could lead to significant morbidity and death. \n\nThe CSC team felt that existing controls reduced the likelihood of the clinical impact occuring to low.  \nAdditional controls may further reduce the potential likelihood of these causes occurring. \n\nRESIDUAL SCORE JUSTIFICATION\n\nEvidence that would change the initial risk scoring not provided ahead of residual scoring being undertaken. Therefore, the residual risk score remains unchanged. \n"]
[null," "]
["Potential Causes and Controls –"]
["ID","Potential Causes",null,null,"ID","Controls",null,"Control type","Control Strength","Partial Control","Potential Owner for Implementation"]
["CA-003","No audit trail available for interactions",null,null,"CO-017","Audit trail for all interactions available to admin users",null,{"$f":"INDEX(Controls!C:C,MATCH('H-01'!E19,Controls!A:A,0))","v":"Potential"},{"$f":"INDEX(Controls!D:D,MATCH('H-01'!E19,Controls!A:A,0))","v":"Strong"}]
["CA-004",{"$f":"IF(ISBLANK(A20),\"\",INDEX(Cause,MATCH(A20,CauseID,0)))","v":"Incomplete user documentation"},null,null,"CO-016",{"$f":"IF(ISBLANK(E20),\"\",INDEX(Control,MATCH(E20,ControlID,0)))","v":"User documentation peer reviewed and and clinically approved"},null,{"$f":"INDEX(Controls!C:C,MATCH('H-01'!E20,Controls!A:A,0))","v":"Potential"},{"$f":"INDEX(Controls!D:D,MATCH('H-01'!E20,Controls!A:A,0))","v":"Weak"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-01'!E20,Controls!A:A,0))","v":"Product Owner"}]
[]
["Version control notes:"]

{"sheet":"H-02","index":7,"n_rows":22,"n_cols":11,"rows_kept":22,"cut":false,"hidden":false,"merged":[[22,0,22,7],[4,0,4,1],[4,2,4,7],[5,0,5,1],[5,2,5,7],[6,0,6,1],[6,2,6,7],[18,5,18,6],[19,5,19,6],[19,1,19,3],[0,0,0,1],[0,2,0,7],[0,8,1,9],[1,0,1,1],[1,2,1,7],[15,12,15,13],[15,1,15,7],[18,1,18,3],[3,0,3,1],[3,2,3,7],[16,0,16,7],[17,1,17,3],[17,5,17,6],[7,0,7,1],[7,4,7,5],[9,0,9,7],[13,0,13,1],[13,2,13,7],[14,0,14,1],[14,2,14,7]]}
["Hazard ID ",null,"H-02",null,null,null,null,null,"Contents"]
["Hazard Name:",null,{"$f":"IF(ISBLANK(C1),\"\",VLOOKUP(C1,'Hazard List'!A2:B47,2))","v":"Reasonably foreseeable misuse."}]
[]
["Hazard Summary",null,"Details"]
["CATEGORY",null,{"$f":"'Hazard List'!C5","v":"Data & Quality"}]
["SUB CATEGORY"]
["HAZARD DESCRIPTION",null,"Unintentional misuse, disruption or alteration to the function of the digital soution  in a way not intended by the manufacturer."]
["Date:",null,"29/02/2024",null,"Latest modification Date:",null,"2024-03-04"]
[]
["Clinical Risk Assessment"]
[null,"Initial Consequence","Initial Likelihood","Initial Clinical Risk Score",null,"Residual Consequence","Residual Likelihood","Residual Clinical Risk Score"]
[null,"Major","Low",{"$f":"IF(OR(ISBLANK(B12),ISBLANK(C12)),\"\",INDEX('Risk Matrix'!$D$5:$H$9,_xlfn.XMATCH(C12,'Risk Matrix'!$C$5:$C$9,0),_xlfn.XMATCH(B12,'Risk Matrix'!$D$10:$H$10,0)))","v":3},null,"Major","Low",{"$f":"IF(OR(ISBLANK(F12),ISBLANK(G12)),\"\",INDEX('Risk Matrix'!$D$5:$H$9,_xlfn.XMATCH(G12,'Risk Matrix'!$C$5:$C$9,0),_xlfn.XMATCH(F12,'Risk Matrix'!$D$10:$H$10,0)))","v":3}]
[null," ",null,null," "," "]
["Potential Clinical Impact",null,"** Example Clinical Impact** \n\nPatients who are receive a medical intervention that they do not need may experience adverse effects (mild or severe) and/or allergic reactions. Examples include myocarditis with the Covid-19 vaccination and allergic reactions such as anaphylaxis which in extreme cases, which can result in death. This is particularly important if patients have a known contraindication or allergy to a vaccine and are then erroneously included in a cohort. Additionally, at a minimum, patients are inconvenienced and healthcare resources are wasted (vaccine resources, staff time).\n\nPatients who are missed from the vaccination cohort data may not receive a vaccine that they are eligible for. These patients usually have a higher risk of contracting certain potentially preventable infectious diseases due to eg. a compromised immune system. They are also more likely to suffer complications if they become ill and consequences could involve significant morbidity and death. \n\nDelay in receiving correct cohort data could lead to delayed vaccination which in turn could lead increased incidence of infectious disease and/or death in the population.\n \nPatient mental health adversely affected by not receiving timely accurate information regarding their vaccination.\n \nUndermining of patient confidence in vaccination programme, resulting in reduced uptake of vaccine opportunities, leading to increased incidence of infectious disease in the population.\n \n"]
["Justification",null,"** Example Justification **\n\nThe CSC team felt that the clinical impact would likely be major due to the fact that reasonably foreseeable misuse could result in incorrect use of cohort data leading to patients being erroneously included/excluded from vaccination callup not related to the original purpose. This could lead to significant morbidity and death as elucidated in Hazards 1 and 2. \n\nThe CSC team felt that existing controls reduced the likelihood of the clinical impact occurring to low.  Any misuse would have to be wilfully deliberate at both an individual and organisational level.\nAdditional controls may further reduce the potential likelihood of these causes occurring. \n\nRESIDUAL SCORE JUSTIFICATION\n\nEvidence that would change the initial risk scoring not provided ahead of residual scoring being undertaken. Therefore, the residual risk score remains unchanged."]
[null," "]
["Potential Causes and Controls –"]
["ID","Potential Causes",null,null,"ID","Controls",null,"Control type","Control Strength","Partial Control","Potential Owner for Implementation"]
["CA-001",{"$f":"IF(ISBLANK(A19),\"\",INDEX(Cause,MATCH(A19,CauseID,0)))","v":"Incorrect cohort data production."},null,null,"CO-016",{"$f":"IF(ISBLANK(E19),\"\",INDEX(Control,MATCH(E19,ControlID,0)))","v":"User documentation peer reviewed and and clinically approved"},null,{"$f":"INDEX(Controls!C:C,MATCH('H-02'!E19,Controls!A:A,0))","v":"Potential"},{"$f":"INDEX(Controls!D:D,MATCH('H-02'!E19,Controls!A:A,0))","v":"Weak"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-02'!E19,Controls!A:A,0))","v":"Product Owner"}]
["CA-009",{"$f":"IF(ISBLANK(A20),\"\",INDEX(Cause,MATCH(A20,CauseID,0)))","v":"No audit trail available for interactions"},null,null,"CO-017","Audit trail for all interactions available to admin users",null,{"$f":"INDEX(Controls!C:C,MATCH('H-02'!E20,Controls!A:A,0))","v":"Potential"},{"$f":"INDEX(Controls!D:D,MATCH('H-02'!E20,Controls!A:A,0))","v":"Strong"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-02'!E20,Controls!A:A,0))","v":"Product Owner"}]
[]
["Version control notes:"]

{"sheet":"H-03","index":8,"n_rows":28,"n_cols":11,"rows_kept":28,"cut":false,"hidden":false,"merged":[[5,0,5,1],[5,2,5,7],[6,0,6,1],[6,2,6,7],[4,0,4,1],[4,2,4,7],[0,8,1,9],[1,0,1,1],[1,2,1,7],[3,0,3,1],[3,2,3,7],[0,0,0,1],[0,2,0,7],[14,0,14,1],[20,0,22,0],[21,5,21,6],[22,5,22,6],[20,5,20,6],[20,1,22,3],[14,2,14,7],[7,0,7,1],[7,4,7,5],[9,0,9,7],[13,0,13,1],[13,2,13,7],[28,0,28,7],[15,12,15,13],[17,1,17,3],[17,5,17,6],[18,5,18,6],[16,0,16,7],[18,1,19,3],[19,5,19,6],[24,5,24,6],[18,0,19,0],[23,1,25,3],[23,5,23,6],[25,5,25,6],[15,1,15,7]]}
["Hazard ID ",null,"H-03",null,null,null,null,null,"Contents"]
["Hazard Name:",null,{"$f":"IF(ISBLANK(C1),\"\",VLOOKUP(C1,'Hazard List'!A2:B47,2))","v":"**Hazard 03 Name **"}]
[]
["Hazard Summary",null,"Details"]
["CATEGORY",null,{"$f":"'Hazard List'!C2","v":"IG and Security"}]
["SUB CATEGORY"]
["HAZARD DESCRIPTION",null,"** Hazard Description**"]
["Date:",null,"29/02/2024",null,"Latest modification Date:",null,"2024-03-04"]
[]
["Clinical Risk Assessment"]
[null,"Initial Consequence","Initial Likelihood","Initial Clinical Risk Score",null,"Residual Consequence","Residual Likelihood","Residual Clinical Risk Score"]
[null,"Major","Low",{"$f":"IF(OR(ISBLANK(B12),ISBLANK(C12)),\"\",INDEX('Risk Matrix'!$D$5:$H$9,_xlfn.XMATCH(C12,'Risk Matrix'!$C$5:$C$9,0),_xlfn.XMATCH(B12,'Risk Matrix'!$D$10:$H$10,0)))","v":3},null,"Major","Low",{"$f":"IF(OR(ISBLANK(F12),ISBLANK(G12)),\"\",INDEX('Risk Matrix'!$D$5:$H$9,_xlfn.XMATCH(G12,'Risk Matrix'!$C$5:$C$9,0),_xlfn.XMATCH(F12,'Risk Matrix'!$D$10:$H$10,0)))","v":3}]
[null," ",null,null," "," "]
["Potential Clinical Impact",null,"*** Note the potential clinical impact if the hazard was to occur **"]
["Justification",null,"** Note the justification of the initial risk scoring based on the information available at that time and the controls that are in place and evidence has been supplied and verified. **\n\nRESIDUAL SCORE JUSTIFICATION\n\n** Note the justification of the residual risk scoring based on the information available at that time and the additional controls that are in place and evidence has been supplied and verified. **\n\n\n\n\n"]
[null," "]
["Potential Causes and Controls –"]
["ID","Potential Causes",null,null,"ID","Controls",null,"Control type","Control Strength","Partial Control","Potential Owner for Implementation"]
["CA-001",{"$f":"IF(ISBLANK(A19),\"\",INDEX(Cause,MATCH(A19,CauseID,0)))","v":"Incorrect cohort data production."},null,null,"CO-001",{"$f":"IF(ISBLANK(E19),\"\",INDEX(Control,MATCH(E19,ControlID,0)))","v":"Trained staff available to respond to queries"},null,{"$f":"INDEX(Controls!C:C,MATCH('H-03'!E19,Controls!A:A,0))","v":"Existing"},{"$f":"INDEX(Controls!D:D,MATCH('H-03'!E19,Controls!A:A,0))","v":"Weak"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-03'!E19,Controls!A:A,0))","v":"Not Applicable"}]
[null,null,null,null,"CO-002",{"$f":"IF(ISBLANK(E20),\"\",INDEX(Control,MATCH(E20,ControlID,0)))","v":"Information leaflets and signposting provided to patient"},null,{"$f":"INDEX(Controls!C:C,MATCH('H-03'!E20,Controls!A:A,0))","v":"Existing"},{"$f":"INDEX(Controls!D:D,MATCH('H-03'!E20,Controls!A:A,0))","v":"Weak"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-03'!E20,Controls!A:A,0))","v":"Not Applicable"}]
["CA-006",{"$f":"IF(ISBLANK(A21),\"\",INDEX(Cause,MATCH(A21,CauseID,0)))","v":"Data extract incomplete"},null,null,"CO-003",{"$f":"IF(ISBLANK(E21),\"\",INDEX(Control,MATCH(E21,ControlID,0)))","v":"Quality checks in place."},null,{"$f":"INDEX(Controls!C:C,MATCH('H-03'!E21,Controls!A:A,0))","v":"Existing"},{"$f":"INDEX(Controls!D:D,MATCH('H-03'!E21,Controls!A:A,0))","v":"Medium"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-03'!E21,Controls!A:A,0))","v":"Not Applicable"}]
[null,null,null,null,"CO-004",{"$f":"IF(ISBLANK(E22),\"\",INDEX(Control,MATCH(E22,ControlID,0)))","v":"Multiple clinicians reviewing the specifications"},null,{"$f":"INDEX(Controls!C:C,MATCH('H-03'!E22,Controls!A:A,0))","v":"Existing"},{"$f":"INDEX(Controls!D:D,MATCH('H-03'!E22,Controls!A:A,0))","v":"Medium"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-03'!E22,Controls!A:A,0))","v":"Not Applicable"}]
[null,null,null,null,"CO-005","Clearly defined codesets",null,{"$f":"INDEX(Controls!C:C,MATCH('H-03'!E23,Controls!A:A,0))","v":"Potential"},{"$f":"INDEX(Controls!D:D,MATCH('H-03'!E23,Controls!A:A,0))","v":"Medium"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-03'!E23,Controls!A:A,0))","v":"Elsewhere"}]
["CA-008",{"$f":"IF(ISBLANK(A24),\"\",INDEX(Cause,MATCH(A24,CauseID,0)))","v":"clinical coding speficication incorrect"},null,null,"CO-005","Clearly defined codesets",null,{"$f":"INDEX(Controls!C:C,MATCH('H-03'!E24,Controls!A:A,0))","v":"Potential"},{"$f":"INDEX(Controls!D:D,MATCH('H-03'!E24,Controls!A:A,0))","v":"Medium"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-03'!E24,Controls!A:A,0))","v":"Elsewhere"}]
[null,null,null,null,"CO-003",{"$f":"IF(ISBLANK(E25),\"\",INDEX(Control,MATCH(E25,ControlID,0)))","v":"Quality checks in place."},null,{"$f":"INDEX(Controls!C:C,MATCH('H-03'!E25,Controls!A:A,0))","v":"Existing"},{"$f":"INDEX(Controls!D:D,MATCH('H-03'!E25,Controls!A:A,0))","v":"Medium"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-03'!E25,Controls!A:A,0))","v":"Not Applicable"}]
[null,null,null,null,"CO-001",{"$f":"IF(ISBLANK(E26),\"\",INDEX(Control,MATCH(E26,ControlID,0)))","v":"Trained staff available to respond to queries"},null,{"$f":"INDEX(Controls!C:C,MATCH('H-03'!E26,Controls!A:A,0))","v":"Existing"},{"$f":"INDEX(Controls!D:D,MATCH('H-03'!E26,Controls!A:A,0))","v":"Weak"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-03'!E26,Controls!A:A,0))","v":"Not Applicable"}]
[]
["Version control notes:"]

{"sheet":"H-04","index":9,"n_rows":29,"n_cols":11,"rows_kept":29,"cut":false,"hidden":false,"merged":[[29,0,29,7],[20,1,20,3],[21,1,21,3],[16,0,16,7],[17,1,17,3],[17,5,17,6],[18,5,18,6],[19,5,19,6],[20,5,20,6],[0,8,1,9],[1,0,1,1],[1,2,1,7],[3,0,3,1],[3,2,3,7],[0,0,0,1],[0,2,0,7],[4,0,4,1],[4,2,4,7],[5,0,5,1],[5,2,5,7],[6,0,6,1],[6,2,6,7],[7,0,7,1],[7,4,7,5],[9,0,9,7],[22,5,22,6],[24,5,24,6],[18,1,19,3],[18,0,19,0],[23,5,23,6],[13,0,13,1],[13,2,13,7],[14,0,14,1],[23,1,24,3],[23,0,24,0],[22,1,22,3],[21,5,21,6],[14,2,14,7]]}
["Hazard ID ",null,"H-04",null,null,null,null,null,"Contents"]
["Hazard Name:",null,{"$f":"IF(ISBLANK(C1),\"\",VLOOKUP(C1,'Hazard List'!A2:B47,2))","v":"**Hazard 04 Name **"}]
[]
["Hazard Summary",null,"Details"]
["CATEGORY",null,{"$f":"'Hazard List'!C3","v":"Guidance and Training"}]
["SUB CATEGORY"]
["HAZARD DESCRIPTION",null,"**Hazard Description**"]
["Date:",null,"29/02/2024",null,"Latest modification Date:",null,"2024-03-04"]
[]
["Clinical Risk Assessment"]
[null,"Initial Consequence","Initial Likelihood","Initial Clinical Risk Score",null,"Residual Consequence","Residual Likelihood","Residual Clinical Risk Score"]
[null,"Major","Medium",{"$f":"IF(OR(ISBLANK(B12),ISBLANK(C12)),\"\",INDEX('Risk Matrix'!$D$5:$H$9,_xlfn.XMATCH(C12,'Risk Matrix'!$C$5:$C$9,0),_xlfn.XMATCH(B12,'Risk Matrix'!$D$10:$H$10,0)))","v":3},null,"Major","Medium",{"$f":"IF(OR(ISBLANK(F12),ISBLANK(G12)),\"\",INDEX('Risk Matrix'!$D$5:$H$9,_xlfn.XMATCH(G12,'Risk Matrix'!$C$5:$C$9,0),_xlfn.XMATCH(F12,'Risk Matrix'!$D$10:$H$10,0)))","v":3}]
[null," ",null,null," "," "]
["Potential Clinical Impact",null,"*** Note the potential clinical impact if the hazard was to occur **"]
["Justification",null,"** Note the justification of the initial risk scoring based on the information available at that time and the controls that are in place and evidence has been supplied and verified. **\n\nRESIDUAL SCORE JUSTIFICATION\n\n** Note the justification of the residual risk scoring based on the information available at that time and the additional controls that are in place and evidence has been supplied and verified. **"]
[]
["Potential Causes and Controls –"]
["ID","Potential Causes",null,null,"ID","Controls",null,"Control type","Control Strength","Partial Control","Potential Owner for Implementation"]
["CA-001",{"$f":"IF(ISBLANK(A19),\"\",INDEX(Cause,MATCH(A19,CauseID,0)))","v":"Incorrect cohort data production."},null,null,"CO-001",{"$f":"IF(ISBLANK(E19),\"\",INDEX(Control,MATCH(E19,ControlID,0)))","v":"Trained staff available to respond to queries"},null,{"$f":"INDEX(Controls!C:C,MATCH('H-04'!E19,Controls!A:A,0))","v":"Existing"},{"$f":"INDEX(Controls!D:D,MATCH('H-04'!E19,Controls!A:A,0))","v":"Weak"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-04'!E19,Controls!A:A,0))","v":"Not Applicable"}]
[null,null,null,null,"CO-005","Clearly defined codesets",null,{"$f":"INDEX(Controls!C:C,MATCH('H-04'!E20,Controls!A:A,0))","v":"Potential"},{"$f":"INDEX(Controls!D:D,MATCH('H-04'!E20,Controls!A:A,0))","v":"Medium"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-04'!E20,Controls!A:A,0))","v":"Elsewhere"}]
["CA-002",{"$f":"IF(ISBLANK(A21),\"\",INDEX(Cause,MATCH(A21,CauseID,0)))","v":"New patient not registered correctly"},null,null,"CO-013",{"$f":"IF(ISBLANK(E21),\"\",INDEX(Control,MATCH(E21,ControlID,0)))","v":"Validation added to CHI number"},null,{"$f":"INDEX(Controls!C:C,MATCH('H-04'!E21,Controls!A:A,0))","v":"Potential"},{"$f":"INDEX(Controls!D:D,MATCH('H-04'!E21,Controls!A:A,0))","v":"Strong"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-04'!E21,Controls!A:A,0))","v":"Elsewhere"}]
["CA-003",{"$f":"IF(ISBLANK(A22),\"\",INDEX(Cause,MATCH(A22,CauseID,0)))","v":"Patients opting out of sharing their records with healthcare providers."},null,null,"CO-012","IG in place to share data",null,{"$f":"INDEX(Controls!C:C,MATCH('H-04'!E22,Controls!A:A,0))","v":"Potential"},{"$f":"INDEX(Controls!D:D,MATCH('H-04'!E22,Controls!A:A,0))","v":"Medium"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-04'!E22,Controls!A:A,0))","v":"Supplier"}]
["CA-004",{"$f":"IF(ISBLANK(A23),\"\",INDEX(Cause,MATCH(A23,CauseID,0)))","v":"Incomplete user documentation"},null,null,"CO-016","User documentation peer reviewed and and clinically approved",null,{"$f":"INDEX(Controls!C:C,MATCH('H-04'!E23,Controls!A:A,0))","v":"Potential"},{"$f":"INDEX(Controls!D:D,MATCH('H-04'!E23,Controls!A:A,0))","v":"Weak"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-04'!E23,Controls!A:A,0))","v":"Product Owner"}]
["CA-005",{"$f":"IF(ISBLANK(A24),\"\",INDEX(Cause,MATCH(A24,CauseID,0)))","v":"Inadequate test scripts"},null,null,"CO-010","Dedicated test environment and training environment for users.",null,{"$f":"INDEX(Controls!C:C,MATCH('H-04'!E24,Controls!A:A,0))","v":"Potential"},{"$f":"INDEX(Controls!D:D,MATCH('H-04'!E24,Controls!A:A,0))","v":"Strong"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-04'!E24,Controls!A:A,0))","v":"Elsewhere"}]
[null,null,null,null,"CO-011","test scripts validated and clearly defined",null,{"$f":"INDEX(Controls!C:C,MATCH('H-04'!E25,Controls!A:A,0))","v":"Potential"},{"$f":"INDEX(Controls!D:D,MATCH('H-04'!E25,Controls!A:A,0))","v":"Medium"},null,{"$f":"INDEX(Controls!G:G,MATCH('H-04'!E25,Controls!A:A,0))","v":"Elsewhere"}]
[]
[]
[]
["Version control notes:"]

{"sheet":"Glossary","index":10,"n_rows":66,"n_cols":12,"rows_kept":66,"cut":false,"hidden":false,"merged":[[0,11,1,12]]}
["Appt ","Appointment ",null,null,null,null,null,null,null,null,null,"Contents"]
["ALARP ","As Low As Reasonably Practicable "]
["AWS ","Amazon Web Services "]
["BAU ","Business As Usual "]
["BC&DR ","Business Continuity and Disaster Recovery "]
["CHI ","Community Health Index "]
["CMO ","Chief Medical Officer "]
["COVID ","Coronavirus Disease "]
["CRMP ","Clinical Risk Management Plan "]
["CSC ","Clinical Safety Case "]
["CSCR ","Clinical Safety Case Report "]
["D&D ","Digital and Data "]
["DNA ","Did Not Attend "]
["E2E ","End-to-End "]
["EMIS ","Egton Medical Information Systems "]
["EMPI ","Enterprise Master Patient Index "]
["EQIA ","Equality Impact Assessment "]
["ESCRO ","Enhanced Services Contract Reporting Options "]
["FVCV ","Flu Vaccine Covid Vaccination Programme "]
["GDPR ","General Data Protection Regulations "]
["GP ","General Practice "]
["GPIT ","General Practice IT Systems - EMIS or Vision "]
["IG ","Information Governance "]
["JCVI ","Joint Committee for Vaccines and Immunisation "]
["JML ","Joiner Movers and Leavers "]
["LOA ","Local Organisation Administrators "]
["MDR ","Medical Device Regulations "]
["MHRA ","Medicines and Healthcare products Regulatory Agency "]
["NCC ","National Computing Centre "]
["NCDS ","National Clinical Data Store "]
["NES ","National Education Scotland "]
["NHS ","National Health Service "]
["NIH ","National Integration Hub "]
["NIP ","National Integration Platform "]
["nMAB ","Neutralising monoclonal antibodies "]
["NVSS ","National Vaccine Scheduling System "]
["NRS ","National Records of Scotland "]
["NSS ","National Services Scotland "]
["P&CFS ","Practitioner & Counter Fraud Services "]
["PCI ","Primary Care Informatics "]
["PCD&I Platform ","Primary Care Data & Intelligence Platform "]
["Pen Testing ","Penetration testing is a simulated cyber-attack against a computer system to check for exploitable vulnerabilities "]
["PII ","Personal Identifiable Information "]
["PHS ","Public Health Scotland "]
["PSD ","Practitioner Services Division (Part of NSS) "]
["QR code ","Quick Response code "]
["RBAC ","Role-Based Access Control "]
["SaaS ","Software as a Service "]
["SaMD ","Software as a Medical Device "]
["SEER "," "]
["SG ","Scottish Government "]
["SLA ","Service-Level Agreement "]
["SME ","Subject Matter Expert "]
["SNOMED CT ","Systematised Nomenclature of Medicine Clinical Terms "]
["SOP ","Standard Operating Procedure "]
["STU ","Scottish Therapeutic Utility "]
["SVIP ","Scottish Vaccination and Immunisation Programme "]
["SWAN ","Scottish Wide Area Network "]
["SWIFT ","Structured What-If Technique "]
["TR ","Temporary Resident "]
["UAT ","User Acceptance Testing "]
["UX ","User Experience "]
["Vax ","Vaccine "]
["VDL ","Vaccination Data Layer "]
["VMT ","Vaccine Management Tool "]
["Wi-Fi ","Wireless Fidelity "]

{"sheet":"Potential Causes","index":11,"n_rows":11,"n_cols":5,"rows_kept":11,"cut":false,"hidden":false,"merged":[]}
["Cause ID","Cause Description","Cause Categories","Causes with Post-Marketing Surveillance (PMS) features","Removed Causes Comments"]
["CA-001","Incorrect cohort data production.","Data & Quality","PMS"]
["CA-002","New patient not registered correctly","Technical"]
["CA-003","Patients opting out of sharing their records with healthcare providers.","Governance"]
["CA-004","Incomplete user documentation","Governance"]
["CA-005","Inadequate test scripts","Testing"]
["CA-006","Data extract incomplete","Data & Quality","PMS"]
["CA-007","Invalid data items","Data & Quality","PMS"]
["CA-008","clinical coding speficication incorrect","Data & Quality","PMS"]
["CA-009","No audit trail available for interactions","Technical","PMS"]
["CA-010","Deceased patients and patients not permanently registered with a Scottish GP included in cohort.","Data & Quality","PMS"]

{"sheet":"Controls","index":12,"n_rows":18,"n_cols":10,"rows_kept":18,"cut":false,"hidden":false,"merged":[]}
["Control ID","Control Description","Control Type","Control Strength","Control Categories","Controls with Post-Marketing Surveillance (PMS) features","Potential Owner for Implementation","Controls with Partial Evidence","Removed Controls Comments","Notes"]
["CO-001","Trained staff available to respond to queries","Existing","Weak","Operational Processes","PMS","Not Applicable","Yes"]
["CO-002","Information leaflets and signposting provided to patient","Existing","Weak","Operational Processes",null,"Not Applicable"]
["CO-003","Quality checks in place.","Existing","Medium","Data & Quality","PMS","Not Applicable","Yes"]
["CO-004","Multiple clinicians reviewing the specifications","Existing","Medium","Resources",null,"Not Applicable","Yes"]
["CO-005","Clearly defined codesets","Potential","Medium","Policy",null,"Elsewhere"]
["CO-006","Adverse Events and near misses logged and reported","Potential","Medium","Governance","PMS","Operations"]
["CO-007","Checks on number of expected records vs number of records actually received.","Potential","Weak","Data & Quality","PMS","Supplier"]
["CO-008","Supplier carries out some base checking and removes these patients from the cohort.","Potential","Weak","Data & Quality",null,"Elsewhere"]
["CO-009","Validation checks added to BMI fields","Potential","Weak","Data & Quality",null,"Elsewhere"]
["CO-010","Dedicated test environment and training environment for users.","Potential","Strong","Governance","PMS","Elsewhere"]
["CO-011","test scripts validated and clearly defined","Potential","Medium","Data & Quality",null,"Elsewhere"]
["CO-012","IG in place to share data","Potential","Medium","Data & Quality","PMS","Supplier"]
["CO-013","Validation added to CHI number","Potential","Strong","Data & Quality",null,"Elsewhere"]
["CO-014","Introduce a separate test CHI number space using an offset of existing modulus 11 algorithm.","Potential","Strong","Technical",null,"Elsewhere"]
["CO-015","Approved list (\"allowlist\") of all live active data sources that data will be accepted from.","Potential","Strong","Technical",null,"Not Applicable","Yes"]
["CO-016","User documentation peer reviewed and and clinically approved","Potential","Weak","Guidance and Training",null,"Product Owner"]
["CO-017","Audit trail for all interactions available to admin users","Potential","Strong","Technical",null,"Product Owner"]

{"sheet":"Hazard summary Mindmap","index":13,"n_rows":1,"n_cols":24,"rows_kept":1,"cut":false,"hidden":false,"merged":[[0,23,1,24]]}
["Overview of Hazards identified - MINDMAP",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Contents"]

{"sheet":"Reference","index":14,"n_rows":21,"n_cols":10,"rows_kept":21,"cut":false,"hidden":false,"merged":[[0,9,1,10]]}
["Control type",null,"Hazard Categories",null,"Cause Categories",null,"Control Categories",null,"Potential Control Owner / Implementor","Contents"]
["Existing",null,"Governance",null,"Communication",null,"Communication",null,"Supplier"]
["Additional",null,"Guidance and Training",null,"Contractual",null,"BC/DR",null,"Elsewhere"]
["Potential",null,"IG and Security",null,"Cybersecurity",null,"Contractual",null,"Operations"]
[null,null,"Mapping",null,"Data & Quality",null,"Cybersecurity",null,"Not Applicable"]
["Control Strength",null,"Resources",null,"Environmental",null,"Data & Quality",null,"Product Owner"]
["Strong",null,"Technical",null,"Functionality",null,"Environmental",null,"Governance Group"]
["Medium",null,"Data & Quality",null,"Governance",null,"Functionality"]
["Weak",null,null,null,"Guidance and Training",null,"Governance"]
[null,null,null,null,"Human Factors",null,"Guidance and Training"]
[null,null,null,null,"Miscellaneous",null,"Human Factors"]
[null,null,null,null,"Networking",null,"Information Governance"]
[null,null,"Hazard Sub-Categories",null,"Operational Processes",null,"System Security"]
[null,null,null,null,"Other",null,"Networking"]
[null,null,null,null,"Policy",null,"Operational Processes"]
[null,null,null,null,"Post Deployment and Support",null,"Post Deployment and Support"]
[null,null,null,null,"Removed",null,"Resources"]
[null,null,null,null,"Resources",null,"Technical"]
[null,null,null,null,"Support & BAU",null,"Testing"]
[null,null,null,null,"Technical",null,"Policy"]
[null,null,null,null,"Testing"]

{"sheet":"Removed Hazard Causes Controls","index":15,"n_rows":38,"n_cols":6,"rows_kept":38,"cut":false,"hidden":false,"merged":[[0,5,1,6]]}
["Hazard ID","Hazard Description","Notes",null,null,"Contents"]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
["Cause ID","Cause Description"]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
["Control ID","Control Description","Default Control Type","Control Type Exceptions","Notes"]