Medical Error Types & the Swiss Cheese Model
A systems-based tour of patient safety: James Reason's Swiss Cheese Model, active vs. latent failures, and the slip–lapse–mistake–violation taxonomy, all anchored to the \"next best step\" the boards test (near miss → non-punitive report, sentinel event → RCA, proactive → FMEA) plus the event-severity ladder, the effectiveness hierarchy, Just Culture, and error disclosure.
The systems view of patient harm
Most patient harm is the product of system failures, not a single careless individual. James Reason's Swiss Cheese Model pictures the healthcare system as successive slices of cheese — each a layer of defense (order sets, pharmacy checks, monitoring, the nurse at the bedside). Every layer has holes (weaknesses). A hazard reaches the patient only in the rare moment when the holes in every layer momentarily line up, letting it pass straight through.
The holes are of two kinds. Active failures are unsafe acts at the sharp end by frontline providers, with immediate effect (giving the wrong drug). Latent conditions are flaws built into the system at the blunt end that lie dormant until they combine (understaffing, look-alike vials, a confusing default order set). Boards reward the systems approach: move the question from "who made the mistake?" to "what in the system let it through, and which defensive layer do we fix?" This mindset underlies Just Culture, non-punitive error reporting, and modern patient safety as a whole.
- Active failure = unsafe act at the sharp end (frontline) with immediate effect — e.g., the wrong drug is administered.
- Latent condition = blunt-end system/design flaw lying dormant (understaffing, look-alike packaging, bad default order set) — the true target of prevention.
- Swiss Cheese Model (James Reason): harm occurs only when holes in every defensive layer align; it is rarely one person's fault.
- Slip = attention/action error and Lapse = memory error — both are skill-based (right plan, wrong execution); a Mistake is a planning error (wrong plan, rule- or knowledge-based).
- A near miss is still reported — it reached no patient yet reveals the same latent hazards, so it is a free lesson that predicts future harm.
- Sentinel event (Joint Commission) → triggers a Root Cause Analysis (RCA); never events (wrong-site/wrong-patient surgery, retained foreign body) are considered preventable.
- Prefer system fixes over blaming individuals — forcing functions are the most effective intervention; re-education / "try harder" is the least.
- Full disclosure of a harmful error to the patient is the standard of care.
Error taxonomy: slip vs. lapse vs. mistake vs. violation
| Error | Cognitive basis | Plan vs. execution | Classic example |
|---|---|---|---|
| Slip | Skill-based, attention failure | Right plan, wrong action | Grabs a look-alike vial (insulin instead of heparin) |
| Lapse | Skill-based, memory failure | Right plan, omitted step | Forgets to remove the tourniquet |
| Mistake | Rule/knowledge-based | Wrong plan, executed as intended | Chooses the wrong antibiotic for the organism |
| Violation | Deliberate deviation | Intentional non-compliance | Skips the surgical time-out |
Event-severity ladder + required response
| Term | Definition | Example | Required response |
|---|---|---|---|
| Near miss (close call) | Error that did not reach the patient | Wrong drug caught before it is given | Non-punitive incident report |
| Adverse event | Harm from medical care — not necessarily an error | Anaphylaxis to a first-ever antibiotic dose | Document; may be non-preventable |
| Preventable adverse event | Harm caused by an error | Overdose from a misplaced decimal | Report + disclose + analyze |
| Sentinel event | Unexpected event that reaches a patient and causes death or serious/permanent harm | Wrong-site surgery, inpatient suicide | Disclose + RCA |
| Never event | Egregious, largely preventable error that should never occur | Retained sponge, wrong-patient surgery | Disclose + RCA; often non-reimbursed |
Vignette 1 — near miss. A nurse about to give concentrated potassium chloride IV notices the vial resembles the saline flush and stops before administering; no harm reaches the patient.
- Buzzword: "caught before it reached the patient" = near miss / close call.
- NEXT BEST STEP: File a report in the non-punitive incident-reporting system. The durable fix is a forcing function — remove concentrated KCl from floor stock.
Vignette 2 — sentinel event. After hip surgery, imaging reveals a retained surgical sponge requiring reoperation.
- Buzzwords: retained foreign body = never event and a sentinel event.
- NEXT BEST STEP: Disclose the error to the patient, then convene a Root Cause Analysis (RCA) — retrospective, systems-focused, blame-free.
Vignette 3 — proactive. Before rolling out a new chemotherapy infusion pump, a committee wants to find failure points before any patient is harmed.
- NEXT BEST STEP: Perform a Failure Mode and Effects Analysis (FMEA) — a prospective risk assessment.
Vignette 4 — wrong-site prevention. To reliably prevent wrong-site surgery:
- NEXT BEST STEP: Apply the Universal Protocol — pre-procedure verification, site marking, and a "time-out" immediately before incision.
- Swiss Cheese itself: harm passes only when the holes align across every defensive layer.
- Active vs. Latent: Active = at the Acting sharp end (immediate, frontline); Latent = Lying dormant in the system (blunt end).
- Slip / Lapse vs. Mistake: slips and lapses = right plan, wrong execution (skill-based — a slip is an attention/action error, a lapse a memory error); a mistake = wrong plan (knowledge/rule-based). Hook: "you did it wrong vs. you planned it wrong."
- RCA vs. FMEA: RCA looks Back (Reactive/Retrospective, after a sentinel event); FMEA looks Forward (proactive, before harm).
- Never events = the 3 W's: Wrong site, Wrong procedure, Wrong patient (plus the retained foreign body).
RCA vs. FMEA — retrospective vs. prospective
| Feature | Root Cause Analysis (RCA) | Failure Mode & Effects Analysis (FMEA) |
|---|---|---|
| Timing | After the event (retrospective) | Before the event (prospective) |
| Nature | Reactive | Proactive |
| Trigger | Sentinel event / serious harm | High-risk process or new system rollout |
| Core question | Why did this happen? | What could go wrong, and how bad? |
| Tools | 5 Whys, fishbone/Ishikawa diagram | Risk Priority Number = Severity × Occurrence × Detectability |
| Goal | Find and fix latent system causes | Design out failures before they occur |
Hierarchy of prevention — strongest to weakest
| Strategy | Effectiveness | Example |
|---|---|---|
| Forcing function / constraint | Strongest | Incompatible connectors so epidural tubing can't attach to an IV; remove concentrated KCl from the floor |
| Automation / computerization | Strong | CPOE with decision support; barcode medication administration |
| Standardization / protocol | Moderate | Surgical safety checklist; standard order sets; Universal Protocol |
| Reminders / double-checks | Weak–moderate | Alerts; independent double-check of high-alert meds |
| Education / "be more careful" | Weakest | In-service training; a policy memo |
- Just Culture grades 3 behaviors: human error (inadvertent slip/lapse) → console the person and fix the system; at-risk behavior (drifting from safe practice without perceiving the risk) → coach; reckless behavior (conscious disregard of substantial risk) → disciplinary action.
- Blame-free ≠ accountability-free — but punishing honest error drives reporting underground and hides latent hazards.
- Error disclosure to the patient/family is ethically required and standard of care: state what happened, express empathy/apology, and outline next steps; transparency tends to reduce litigation.
- Quality improvement: the PDSA cycle (Plan–Do–Study–Act) runs small, rapid tests of change; Lean targets waste, Six Sigma targets variation.
- Report near misses and errors to a non-punitive system — near misses are the cheapest lessons in patient safety.
Practice Patient Safety now
Board-style questions, spaced-repetition flashcards, and a Socratic AI tutor — free to start.