Laboratory Service — Service Risk Register
Status: populated Owner: TBD Last updated: 2026-04-18 Companion: Service Template · 03 platform-services · 02 DDD
1. Risk Register
| ID | Risk | Likelihood | Impact | Owner | Mitigation | Status |
|---|---|---|---|---|---|---|
| RISK-LAB-001 | Critical value not delivered to clinician (NATS down) | Low | Critical | SRE | Outbox pattern; escalation timer; backup alert channel via communication-service | Open |
| RISK-LAB-002 | Specimen mislabeling leading to wrong-patient result | Low | Critical | Clinical informatics | Accession number on label; collector confirmation step; audit trail | Open |
| RISK-LAB-003 | LOINC data licensing gap (Afghanistan adaptation) | Medium | High | Platform team | Use ICD-10-AM local codes as fallback; track LOINC license procurement | Open |
| RISK-LAB-004 | Analyzer HL7 v2 ORU format incompatibility | Medium | High | Integration team | Adapter-based parsing; raw message store for retry; fallback to manual entry | Open |
| RISK-LAB-005 | Offline facility node sync conflict on accession numbers | Low | Medium | Platform team | Accession number includes tenant+date prefix; unique per node; merge strategy server_authoritative | Open |
| RISK-LAB-006 | Result trending query performance degradation | Medium | Medium | Engineering | Indexed test_code + released_at; Redis cache; pagination enforced | Open |
| RISK-LAB-007 | Multi-tenant data leakage via misconfigured RLS | Very Low | Critical | Security | RLS policies tested in mandatory tenant-isolation.spec.ts; CI gate | Open |
| RISK-LAB-008 | Correction creates orphaned FHIR Observation | Low | Medium | Engineering | Correction replaces fhir_observation_id; prior observation status set to entered-in-error in FHIR | Open |