Biological Risk Assessment: General Considerations for Point-of-Care Testing

Biological Risk Management for Point of Care Testing Sites

Point of Care Testing Staff Support Health and Reduce Risk

As someone who delivers point-of-care (POC) testing, you help people understand their health status. You collect specimens containing biological material, such as blood or saliva, from people to test and determine what is making them sick. The results from these tests can help the people you serve make informed decisions about what to do next.

From the time you start each testing process until you finish, there are risks involved. Use this guidance to help make sure you are reducing those risks as much as possible to keep you and your coworkers, patients, customers, family, and community safe and healthy while you perform POC tests. Learn how to evaluate and reduce risks using the information below; learn why risk assessment is important in your role here.

Perform Risk Management Using these Five Steps

Risk management is a five-step process of identifying and analyzing risks and taking steps to reduce or eliminate them.

Risk Assessment Process
Biological Hazard

biological hazard is something from biological material that can cause harm, such as viruses or bacteria (living biological organisms). A biological hazard can reside in a human specimen, like mucus, that you can collect from inside the nose, or that someone can cough up from their lungsA human specimen can carry viruses or bacteria that might harm you or make you sick. For exampleyou might be at risk of breathing in infectious bacteria when a person sick with tuberculosis (TB) sneezes near you. 

Biological Risk

biological risk is the combination of the likelihood of an undesirable incident occurring and the severity of the harm if the incident happens. One example might be what can go wrong while testing blood from someone with hepatitis or HIV, such as potential exposure that leads to an accidental infection 

Risk Assessment Basics

The guidance presented here focuses on hazards and risks that come with working with specimens that contain harmful biological material while performing POC testing. We explain how to conduct a risk assessment (steps 1-2) to help you reduce risk when you perform POC tests 

You can also find out where to get more information about steps 3–5 on this page. 

Additional Information

For more details on the complete risk management processsee the World Health Organization (WHO) Laboratory Biosafety Manual, 4th Edition. Read section 2, pages 4-23You can also refer to Section II of the CDC/NIH Biosafety in Microbiological and Biomedical Laboratories, 6th Edition.  

Before You Start Your Risk Assessment Process
Create A Risk Assessment Team

You and the people working at your POC site should form a risk assessment team. When you include multiple viewpoints, you can reduce the possibility that the input from one or two people will strongly influence the process. This team could be made up of managers, testing staff, safety professionals, facility staff, and other employees familiar with the site-specific and activity-specific testing activities.  

Choose the Right Time for Risk Assessment

Plan ahead and do a risk assessment befortesting begins. Repeat the risk assessment when any change is introduced into your process, such as changes in practices, personnel, equipment, or testing location.

Select the Right Risk Assessment Type

This guidance focuses on informal risk assessments, which can be performed in many POC testing settings. This usually involves short discussions among staff about potential risks and the controls to reduce those risks that occur weekly, daily, or even throughout the day, depending on how much testing is happening at your site. Formal risk assessment guidance can be found here 

Use these Steps for a Risk Assessment in Your Point of Care Testing Operation

Your risk assessment team should consider hazards, the specific testing steps, existing controls, the competency and experience of POC testing staff, and the testing site. 

Step 1: Identify the Hazards and Risks

To identify the hazards in each testing task that must be completed, ask what, where, and how the testing is occurring, and who is doing the work. Then, determine what could go wrong in every step of the procedure and the risks, such as an injury or an exposure to biological material (a pathogen) that could make you sickOne way to accomplish this is to perform a job hazard analysis (JHA). The federal Occupational Health and Safety Administration (OSHA) published an example of this tool; look on pages 4–12A JHA is a technique you can use to break down specific tasks to identify hazards and risks before they occur.

Examples of Hazards vs. Risks

Hazards vs. Risks

It is important to remember the difference between hazard and risk. Hazard is a source or situation with the potential for causing harm, while risk is the combination of the likelihood of something bad occurring and the harm if that event occurs. 

Step 2. Assess the Risks

2a. Characterize the risks

In this step, you start by considering how likely it is that the undesirable event will occur, and what the consequences would be if it occurs. 

Likelihood addresses everything leading up to an event happening. Consequence addresses everything that results from that event happening. 


Some factors to consider that can affect how likely an undesirable event  may be include: 

  • Biological agent factors 
    • Ways that biological organisms (such as viruses or bacteria) can get into your body (potential routes of transmission), for example, by splashing small liquid droplets into your eyes or noseinhaling tiny particles suspended in air (aerosols), getting harmful organisms into your mouth (ingestion), or by injection or penetration through the skin from a needlestick 
  • Testing site factors 
    • The place where testing happens, whether in a building or outside (physical infrastructure), the type of facility, presence of safety controlstype of equipment usedfunctioning and reliability of ventilation systems and electrical power 
    • Procedural: existence of policies and training, availability of appropriate personal protective equipment (PPE), work procedures that may produce aerosols or cause cuts by using sharps,  the types and complexity of procedures being conducted, and the competency and experience of those performing the tests 


Some factors to consider that can affect the consequences of an undesirable event  include 

  • Biological agent factors 
    • How easily the infection can spread from person to person (contagiousness) 
    • How severe the disease could be
  • Human factors 
    • Willingness of the testing site staff to receive medical treatment that could reduce how sick they might get if they are exposed to hazards 
    • Understanding the procedures to follow if something goes wrong and how they can limit the consequences of an adverse event 

2b. Prioritize the risks and determine if risks are acceptable 

The risk assessment team determines how it defines “likelihood” and “consequence. One example of how likelihood and consequence are defined as: 


  • Low: Unlikely to occur. Highly trained and experienced staff, comprehensive safety procedures and controls in place 
  • ModerateMight occur. Moderately trained staff, some procedures and controls in place 
  • High: Likely to occurStaff lack sufficient training, few safety procedures and controls in place 


  • Negligible: Trivial incident or near miss that requires reporting and follow-up 
  • Moderate: Incident that causes harm and requires medical intervention and treatment or has environmental consequences 
  • Severe: Potential fatality, serious illnesssecondary transmission, or significant environmental impact 

Once likelihood and consequences are definedPOC testing risk assessment teams should determine what level of risk is acceptable. If the risks for a particular activity are not acceptable to leadership, then the activity should not occur.  

Risk Assessment Graphic

Determining acceptable risk is a subjective process, meaning that each person or organization will use their own judgment. At your siteyour team will determine what risk levels are considered acceptable and what risk levels are considered unacceptableIf you determine the risks are acceptableproceed in your work with the existing controls. For the risks considered unacceptable, stop work until you can put in place additional risk-reducing controls that bring risks to an acceptable level.  

Steps 3-4: Determine and Implement Controls

If your risk assessment team finds some risks unacceptabledevelop a mitigation control plan (see an example from the Occupational Safety and Health Administration – OSHA). Additional controls can reduce the likelihood or consequences of specific risks and bring them to a level that is acceptable. For example, additional PPE and additional training and monitoring could significantly reduce the risk of accidental exposure and infection during POC testing. 

Step 5: Review Effectiveness of Controls

Your risk assessment team should review and evaluate the effectiveness of implementing additional controls, such as the use of PPE. For more information on mitigation and evaluation of the performance of controls, refer to this document from the World Health Organization: WHO Risk Assessment Monograph.    

Use a Job Hazard Analysis to Assist in Communicating Risks and Controls

At your testing site, identify a team to perform a risk assessment using a job hazard analysis (JHA) prior to initiating testing activities. A simple table may be developed to perform and document the risk assessment prior to testing. The risk assessment team should review the JHA table once it is completed, with testing personnel, ideally daily. Additionally, the risk assessment team should discuss any changes to testing activities to ensure that potential hazards are identified before testing begins. A sample JHA table is shown below; download or print this template of the JHA table [PDF] [Word]. 

Job Hazard Analysis Table


Aerosolgenerating procedure: Any procedure that intentionally or inadvertently results in the creation of tiny liquid or solid particles, which become suspended in the air as aerosols or droplets. 

DropletsTiny amounts of liquids that can come from a person (through breathing, sneezing, or coughing) or from collecting or processing samples. Droplets can contaminate surfaces or be ingested (breathed in or swallowed) by testing staff, patients, or others. 

Hazard: Something that is intrinsically dangerous such as an object, a chemical, an infectious organism, or a situation. 

Personal protective equipment (PPE): Equipment and/or clothing worn by personnel to provide a barrier against biological organisms, thereby minimizing the likelihood of exposure. PPE includes, but is not limited to, laboratory coats, gowns, gloves, safety glasses, safety goggles, masks, and respirators. 

Point-of-care (POCtesting involves performing a test outside of a laboratory that produces a rapid and reliable result, aiding in identifying or managing chronic diseases and acute infections. 

Risk: Combination of the likelihood of an incident occurring and the consequences if that incident occurs. 

Risk Assessment: Process of evaluating the risks arising from a hazard(s), taking into account the adequacy of any existing controls, prioritizing those risks, and deciding whether the risks is/are acceptable. Risk assessment is one part of risk management. 

Risk Management: Overall process to identify, evaluate, control, and monitor risks. 

Risk Mitigation:  Actions and control measures that are put into place to reduce the risks to an acceptable level.