RenaCare Dialysis Clinic — Risk Management
A structured risk register, sensitivity analysis and the mitigation measures covering clinical, market, financial, regulatory and operational risks.
Section 10 · Business Plan
Risk Management
A structured risk register, sensitivity analysis and the mitigation measures covering clinical, market, financial, regulatory and operational risks.
10.1 Enterprise Risk Framework
Risk management at Renacare follows a structured enterprise risk
management framework aligned to ISO 31000. All material risks are
identified, categorised, assessed for likelihood and impact, assigned an
owner at executive level, and reviewed quarterly by the Audit & Risk
Committee. Material changes in risk profile are escalated to the
Board.
10.2 Risk Heatmap
10.3 Key Risk Register
The Company’s key risk register is summarised below. Each risk is
owned by a named member of the executive team, with specific mitigation
actions, key risk indicators, and escalation triggers documented in the
operational risk register.
| Risk | Likelihood | Impact | Category | Mitigation |
|---|---|---|---|---|
| Regulatory licensing delay | Moderate | High | Strategic | Early engagement with DOH; retain healthcare regulatory counsel; parallel submissions |
| Medical aid DSP rejection | Low | Very High | Commercial | Pre-launch accreditation with ≥ 3 schemes; high clinical standards; competitive tariffs |
| Medical aid tariff compression | High | High | Commercial | Diversified payer mix; PPP exposure; cost discipline; operational leverage |
| Dialysis nurse shortage | High | Moderate | Operational | Competitive remuneration; training scholarships; retention incentives |
| Equipment breakdown | Low | Moderate | Operational | Redundant machines; 24-hr OEM service contracts; annual preventive maintenance |
| Load-shedding / power outages | Very High | Low | Operational | UPS covering 8+ hours; solar-diesel hybrid; grid + genset redundancy |
| Water supply disruption | Moderate | High | Operational | Municipal + borehole backup; 12-hour RO water storage; supplier DR plan |
| NHI transition | Moderate | High | Strategic | Scenario planning; PPP positioning; early participation in NHI pilots |
| Interest rate rise | Moderate | Low | Financial | Fixed rate where available; interest-rate cap at drawdown |
| Water quality clinical failure | Very Low | Very High | Clinical | AAMI-standard validation; monthly water testing; independent annual audit |
| Competitor price war | Low | Moderate | Commercial | Cost leadership; patient-centric differentiation; long-term referrer contracts |
| Cyber / data breach | Low | Moderate | Operational | ISO 27001-aligned controls; cyber insurance; POPIA compliance programme |
| Key person risk (Medical Director) | Low | Moderate | Organisational | Employment retention package; second nephrologist contracted; succession plan |
| Foreign exchange (ZAR weakening) | Moderate | Low | Financial | Forward covers on major USD/EUR equipment purchases; local sourcing where possible |
10.4 Clinical & Patient Safety Risks
Clinical and patient safety risks receive particular attention given
the life-critical nature of dialysis therapy. Renacare’s clinical risk
framework distinguishes between preventable adverse events (which must
be driven towards zero), expected complications (which must be minimised
and managed), and residual risks inherent to the therapy itself. The
Medical Director chairs a monthly clinical risk review, and the Clinical
Advisory Panel conducts an annual independent review.
- Dialysis water contamination — mitigated by dual-pass RO,
ultrafilters, continuous conductivity monitoring, monthly microbiology
and endotoxin testing, and annual AAMI-standard audit. - Cross-infection (Hepatitis B, Hepatitis C, HIV) — mitigated by
serological screening of all new patients, dedicated isolation machines
and bays for seropositive patients, and strict dedicated-equipment
protocols. - Vascular access complications — mitigated by a structured
vascular access programme with partner vascular surgeons, monthly access
surveillance, and access-related bacteraemia rate tracking. - Medication errors — mitigated by unit-dose preparation,
electronic prescribing integration, double-sign protocols for high-risk
medications (heparin, EPO), and monthly medication error audit. - Intradialytic hypotension — mitigated by protocolised dry-weight
assessment, online clearance monitoring, and dedicated cardiology
referral pathway for refractory cases.
10.5 Insurance & Risk Transfer
Renacare will carry a comprehensive insurance programme placed
through a specialist healthcare broker. The core programme includes
professional indemnity (R50 million limit per occurrence), public and
product liability (R20 million), clinical trials liability (R10 million
if applicable), directors’ and officers’ liability (R20 million),
property and business interruption (R25 million / 12 months), cyber
liability (R10 million), and crime and employee dishonesty (R5 million).
Premiums are budgeted at R380,000 in Year 1 rising in line with revenue
growth.
Confidential — this business plan is provided to prospective investors and lenders for evaluation purposes only and may not be reproduced or distributed without the written consent of RenaCare Dialysis Clinic (Pty) Ltd.