Did those (management, presumably) who assigned this task elaborate at all?
For instance ... what risks are to be addressed? Those to the patient? When ... during "normal use", or only under fault conditions?
Are the insurance folk involved? What about Public Liability and (or) risk to the hospital's reputation?
And, how about mitigations ... such as a properly conducted PM regime?
What level (depth) of input criteria is expected? Sometimes just a High, Medium or Low assignment of Risk suffices.
If you're not careful, having spent many days on the task, you may be rewarded with something like:- "That's not really what we had in mind ... can you go back and ... etc. etc."
In short, I would get the request clearly defined in writing before embarking upon it.
Another tip:- when going through your equipment types, don't forget that "location" (where and when it is used) may require a different Risk Score even amongst equipment of the same type (eg:- the simple electric suction pump, used in various locations, and under various levels of "crisis").
Meanwhile, if simple Risk Level Scores are all that are expected, I'm pretty sure we have touched on those a few times before. I don't have time to dig out the links right now, but will check back later. Hopefully by then someone else may have chipped in.
