Supports:
Community
Availability:
Odoo Online
Odoo.sh
On Premise
Odoo Online
Odoo.sh
On Premise
Odoo for NHS Back Office Operations
NHS Incident & Risk Management
A Datix Alternative, Comprehensive incident reporting, PSIRF investigation, and 5×5 risk register for NHS organisations.
Read Blog
Dive into our comprehensive blog posts covering the latest in cybersecurity trends and insights.
Read Blog
Video Tutorial
Watch our detailed video demonstrations and tutorials on YouTube for hands-on learning.
Watch Demo
Key Highlights
Incident Reporting & Triage
Public and direct incident submission with Kanban triage queue, NPSA harm grading, and automated PSIRF response level assignment.
PSIRF-Aligned Investigations
Full Patient Safety Incident Investigation workflow with chronology, contributing factors, findings & learning, and approval stages.
5×5 NPSA Risk Register
Four-tier risk register hierarchy (Local, Directorate, Corporate, BAF) with inherent, current, and target scoring plus escalation workflows.
Statutory Compliance
Automated rules engine for CQC, Duty of Candour, RIDDOR, and LFPSE obligations triggered by incident category and harm grade.
Corrective Actions Tracking
Unified corrective and preventative action management linked to incidents and risks, with priority, due date, and status tracking.
Board Pack & Analytics
One-click Quality & Safety Monthly Board Pack PDF plus incident analysis and risk analysis pivot reporting for governance oversight.
Manage User Access
Configure Quality and Safety roles, including Quality Lead and Safeguarding Officer access levels, from the Users settings page.
Quality & Safety Provider Configuration
Configure provider type, public incident form settings, anonymous reporting, Duty of Candour trigger grade, and board pack recipients from the Settings menu.
Public Form Token Configuration
Generate a secure token to share the public incident reporting form via
/incident/report/<token> (e.g., http://localhost:8019/incident/report/789c092fced14bca8265), managed by the NhsPublicReport controller.
Public Incident Reporting Form
Allow staff and the public to submit incident reports online via a secure, token-protected public form capturing incident type, location, what happened, and immediate actions taken.
Capture Persons Affected & Evidence
Record persons affected, optional reporter contact details, and supporting file attachments before submitting the incident report securely.
Incident Submission Confirmation
Reporters receive an immediate confirmation with a unique incident reference number and notification that a trained handler will review the report within 3 working days.
Incident Triage Queue
Manage all incoming incident reports through a Kanban triage queue organised by New and Triage stages, with sub-menus for All Incidents, My Reports, and Investigations.
NHS Incident Record
View and manage the full incident record including identification, when and where it occurred, what happened, immediate actions taken, and reporter information across multiple tabs.
Triage Incident Wizard
Confirm grading details including NPSA harm grade, LFPSE physical and psychological harm grades, and PSIRF response level, assign a handler, and accept, reject, or mark incidents as duplicates.
NHS Incident & Safety Configuration Menu
Access all system configuration options including incident categories, locations, risk categories, notification rules, terminology, bank holidays, CQC notification types, provider setup wizard, and settings.
Manage Incident Categories
Configure a comprehensive NHS incident category hierarchy covering clinical treatment, death of service user, dispensing errors, falls, infrastructure, medication, safeguarding, staff injury, and more.
Incident Category Configuration
Set default PSIRF response level, minimum harm suggestion, RIDDOR prompt requirements, and applicable provider types for each incident category.
NHS Risk Categories
Manage risk appetite and categorisation across Clinical/Patient Safety, Environment & Estates, Financial, Health & Safety, IT & Information, Regulatory & Compliance, Reputational, and Workforce domains.
Statutory Notification Rules
Configure automated notification rules for CQC, Duty of Candour, RIDDOR, and LFPSE reporting obligations, each linked to specific provider types, categories, and minimum harm grades.
Provider-Specific Terminology Configuration
Maintain provider type-specific display labels for incident words, location units, and persons affected ensuring terminology matches the language used across NHS Trusts, GP Practices, Care Homes, and Hospices.
NHS Bank Holiday Calendar
Maintain the UK bank holiday calendar used by the system to calculate statutory response deadlines, ensuring accurate Duty of Candour and CQC notification timelines.
CQC Notification Types
Configure Care Quality Commission notification types including Absconding, Abuse, Death of Service User, DoLS, Event Preventing Safe Service, and Police Involvement, each mapped to its statutory CQC regulation.
Provider Setup Wizard
Run the Provider Setup Wizard to automatically activate the correct incident categories, terminology pack, and notification rules for your provider type. Can be re-run at any time without data loss.
My Incident Reports
View all incidents assigned to you showing reference, event type, date/time, location, category, NPSA harm grade, PSIRF response level, handler, and current workflow status.
PSIRF Investigations
Manage all Patient Safety Incident Investigations (PSII) linked to incidents, with response level, lead investigator, and current status across Draft, In Progress, Submitted for Approval, and Approved stages.
Start a PSIRF Investigation
Create an investigation record linked to a patient safety incident, assign a lead investigator and team panel, set the PSIRF response level, and progress through the structured approval workflow.
Investigation Terms of Reference
Document the investigation's scope and purpose in the Terms of Reference tab, defining what the investigation aims to identify including causes, contributing factors, and learning opportunities.
Investigation Chronology
Build a detailed chronological timeline of the incident, recording date/time entries and their corresponding evidence sources such as admission records, medical notes, observation charts, and staff statements.
Investigation Contributing Factors
Systematically identify and record contributing factors across environment, external, individual, and organisational domains using a structured PSIRF-aligned checklist covering staffing, training, policy, equipment, and communication issues.
Investigation Findings & Learning
Record investigation findings, lessons learned, and areas of good practice to drive continuous improvement and organisational learning aligned with the Patient Safety Incident Response Framework.
Investigation Corrective Actions
Link and track corrective actions directly from the investigation record, monitoring action title, owner, due date, and completion status to ensure findings translate into measurable safety improvements.
Investigation Approval & Print Report
Submit the investigation for approval and generate a printable investigation summary report once approved, with a full audit trail of all status transitions recorded in the activity log.
Investigation Summary Report
Generate a comprehensive investigation summary PDF including terms of reference, chronology timeline, contributing factors, findings, lessons learned, and linked actions for governance reporting.
Incident Investigation Linkage
View and navigate to PSIRF investigations directly from the incident record via the Investigation tab, maintaining a clear link between the original incident and its investigation.
Incident Linked Actions
Manage and monitor corrective actions linked to an incident from the Actions tab, tracking action titles, types, ownership, due dates, and completion status in one place.
Incident Pending Closure
Move incidents to Pending Closure once all required actions are complete, with the option to request official closure and provide feedback to the original reporter.
Reporter Feedback & Closure
Send feedback to the incident reporter before closing the record, ensuring the reporter is informed of the outcome and any actions taken following their report.
Incident Closure & Risk Creation
Close the incident and optionally escalate it directly to the 5×5 NPSA Risk Register by clicking Create Risk, automatically pre-populating risk details from the incident record.
Risk Register Risk Description
Document the risk using a structured Cause-Event-Effect (IF/THEN/RESULTING IN) framework, with links to source incidents, risk category, register tier, and appetite threshold indicators.
5×5 NPSA Risk Scoring Matrix
Score risks across three dimensions — Inherent (before controls), Current (with existing controls), and Target (post-mitigation) — calculating consequence, likelihood, rating, and band automatically.
Risk Controls Management
Record existing controls in place for each risk and identify any gaps in control effectiveness to highlight areas requiring immediate attention or strengthening.
Risk Assurance Framework
Document first, second, and third-line assurances for each risk, recording assurance description, line of defence, any gaps in assurance, and the evidence source.
Risk Mitigation Actions
Link and track corrective and preventative mitigation actions to specific risks, monitoring action titles, owners, due dates, and status to drive risk reduction.
Risk Evidence Incidents
Link incidents directly to risks as evidence, displaying incident reference, date/time, category, and NPSA harm grade to build an evidence base supporting the risk rating.
Risk Review Log
Maintain a full audit trail of all risk reviews, recording the reviewer, updated consequence and likelihood scores, decision taken (No Change, Re-scored, Escalated), and commentary.
Risk Lifecycle Management
Activate risks to make them live on the register, then manage the full lifecycle using Escalate/Move Register, Record Review, and Close Risk actions as risk status evolves over time.
Risk Escalation Wizard
Escalate risks between register tiers (Local to Directorate to Corporate to BAF) using the escalation wizard, with rationale, target register selection, and notification to relevant users.
Directorate Risk Register
View the risk escalated to the Directorate Register with full risk description, scoring, controls, and assurances preserved from the originating departmental register.
Risk Review Wizard
Conduct structured periodic risk reviews using the Review Risk wizard, allowing reviewers to record new scores, select a decision (No Change, Re-scored, Escalate, De-escalate, Close Risk), and add commentary.
NHS Risk Registers
Manage four tiers of risk registers — Board Assurance Framework (BAF), Corporate Risk Register, Directorate Register, and Local/Departmental Register — supporting the full NHS risk governance hierarchy.
Risk Register Configuration
Configure each risk register with a name, tier classification (Local/Departmental, Directorate/Divisional, Corporate, BAF), owner group, and description for governance documentation.
Risk Heatmap View
Visualise your risk portfolio on the 5×5 Risk Heatmap, accessible from the Risk Register menu, providing a matrix view of risk distribution by consequence and likelihood score.
My Corrective Actions
Track all corrective and preventative actions assigned to you, with action reference, title, type, linked incident or risk, due date, priority, and current status at a glance.
All Actions Overview
Review all corrective and preventative actions across the organisation, monitoring progress and identifying overdue items to ensure timely completion of improvement activities.
Incident Analysis Reporting
Analyse incident patterns using the Incident Analysis pivot table, segmented by category, harm grade, date, and location, to identify trends and drive targeted quality improvement.
Risk Analysis Reporting
Analyse the risk portfolio using the Risk Analysis pivot, segmented by register, category, band, and owner to support board-level risk reporting and governance oversight.
Reporting Menu
Access Incident Analysis, Risk Analysis, and the Board Pack PDF report from the Reporting menu to support governance, assurance, and board-level quality and safety reporting.
Quality & Safety Monthly Board Pack
Generate the Quality & Safety Monthly Board Pack PDF covering incident summary metrics, Duty of Candour obligations, extreme and high active risks, and overdue corrective actions.
Our Features
01
Public Incident Reporting
02
Kanban Triage Queue
03
PSIRF Investigation Workflow
04
5×5 NPSA Risk Register
05
CQC / RIDDOR / LFPSE Compliance
06
Duty of Candour Tracking
07
Four-Tier Risk Escalation
08
Corrective Action Management
09
Monthly Board Pack PDF Report
Frequently Asked Questions
Can staff submit incident reports anonymously?
Yes. When anonymous reporting is enabled in Provider Configuration, staff can submit incidents via the public form without entering personal details. The Your Details section is clearly marked optional, and the system processes the report without linking it to a named individual.
How does the module determine which statutory notifications are required for an incident?
The rules engine evaluates each incident against the configured Notification Rules, matching on provider type, incident category, and minimum NPSA harm grade. When a match is found, the relevant obligations (CQC notification, Duty of Candour, RIDDOR, LFPSE export) are automatically flagged on the incident record for the handler to action.
Can a risk be moved between register tiers after it has been activated?
Yes. Active risks can be escalated or moved using the Escalate / Move Register wizard, which allows selection of the target register tier and requires a rationale. The original risk record retains its full audit trail, and the escalated version is created in the target register with all risk details preserved.
Latest Releases
Latest Release 19.0.1.0.0
Add
18th June, 2026
Initial Commit
Our Services
Odoo Customization
Odoo Implementation
Odoo Support
Odoo Migration
Odoo Integration
Odoo Consultancy
Odoo Licensing
Hire Odoo Developer
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 5814 |
| Technical Name |
odoo_nhs_incident_risk |
| License | LGPL-3 |
| Website | https://www.cybrosys.com |
Please log in to comment on this module