Healthcare delivery is a risky business. People view the NHS in the same light as other commercial businesses such as the hotel, retail and airline industries. The White Paper ‘The New NHS: Modern, Dependable’ (Secretary of State for Health, 1997) places statutory responsibilities on managers and clinicians to provide a quality service and to have accountability for clinical governance and performance management. Quality and risk are two sides of the same coin, i.e. if you have good quality you have low risk, and this firmly supports the clinical effectiveness agenda. Healthcare organizations in all sectors of care delivery need to demonstrate their high levels of achievement and commitment to continuous quality improvements. Risk management is a process for identifying, assessing and evaluating risks which have adverse effects on the quality, safety and effectiveness of service delivery, and taking positive action to eliminate or reduce them. Having an open, honest and blame-free organization which is open to improving processes and systems of care is a big step towards having staff who are committed to quality and getting things right. Near-miss, incident and indicator recording and reporting are cornerstones of any quality and risk management system.