Behavioral Health Crisis Stabilization Unit Security Risk Assessment Guide

How do you conduct a security risk assessment during planning?

A security risk assessment helps you identify how the unit’s setting, operations, and patient needs could contribute to self-harm, violence, unauthorized access, or disrupted care. Treat it as a multidisciplinary planning tool—not a substitute for clinical assessment, licensing requirements, or applicable fire and life-safety codes.

Include clinical and facilities leaders, frontline staff, security representatives, and people with relevant lived experience when appropriate. Review the unit’s intended population, services, operating hours, admission and discharge processes, staffing model, and how the facility coordinates with emergency medical services and community crisis providers. SAMHSA’s national behavioral health crisis care guidance emphasizes coordinated crisis services, safe settings, and continuity of care.

Use a documented walk-through and review available information, such as prior incidents, near misses, staff reports, patient feedback, environmental inspections, and changes in patient population or operations. Record each identified hazard, the people potentially affected, existing safeguards, additional actions needed, the person responsible, and a target date. Revisit unresolved items until mitigations are implemented and checked.

Keep this assessment distinct from an individual patient’s clinical suicide or violence risk assessment. Environmental risk planning considers what the setting makes possible; clinical assessment considers a person’s current needs and appropriate care. Both may inform safeguards, but neither replaces the other. Confirm which requirements apply to your facility type, state, locality, and accreditor.

Which patient-care areas and hazards should the assessment cover?

Assess the full patient journey, not just bedrooms. Include entry and screening points, waiting and intake areas, patient rooms, bathrooms and showers, medication and treatment spaces, quiet or sensory rooms, group and dining areas, corridors, exits, outdoor spaces, and areas used during transfers. Also assess staff work areas, storage rooms, loading or service access, and other places patients or visitors might enter.

For a ligature risk assessment, look for environmental features that could enable self-harm, including potential anchor points and objects that could be misused. Consider furniture, fixtures, doors, hardware, cords, equipment, and items brought into a care space. The Joint Commission describes environmental assessment and mitigation as central to reducing suicide risk; the exact safeguards depend on the setting and the people being served. See its suicide risk reduction resources.

Also consider risks beyond ligature hazards: blind spots, poor visibility, unsecured medications or cleaning products, unattended tools, inadequate separation between public and patient areas, and access points that could allow someone to enter or leave unnoticed. Assess how sound, crowding, long waits, confusing signs, or limited private space could increase distress or make it harder for staff to notice a developing concern.

Record hazards by location and describe practical mitigations. For example, a mitigation may involve removing or securing an item, changing how an area is used, improving staff visibility, or assigning a patient to a safer space with an appropriate observation plan. Do not assume every crisis stabilization setting must have the same physical design or be ligature-resistant; applicable standards vary by facility type and accreditation.

How should you assign and update risk levels?

Use a consistent method to rank hazards so the team can prioritize action. A simple local scale may describe risk as low, moderate, high, or critical, based on factors such as the likelihood of harm, potential severity, who could be exposed, and whether existing safeguards are reliable. Define each level in writing so staff apply it consistently.

For each risk, document the location, the hazard, the rationale for its rating, current controls, additional mitigation, the person accountable, and the date for follow-up. Where a hazard cannot be removed immediately, document interim safeguards and who will verify that they are working. Escalate urgent concerns through the facility’s safety process rather than leaving them in a routine action log.

Review the assessment on a planned schedule and whenever a meaningful change may alter risk—for example, construction, a new service or patient group, a change in staffing or access arrangements, or an incident or near miss. An annual operational review is a useful planning practice, but the required review schedule depends on the facility’s applicable rules and standards. For example, hospitals subject to 42 CFR § 482.15 must review and update their emergency preparedness plan at least every two years; that is a requirement for that plan, not a universal schedule for every security risk assessment.

Update patient-specific safeguards separately as clinical circumstances change. The Joint Commission’s suicide prevention guidance describes documenting an individual’s risk and mitigation plan, establishing reassessment procedures, and monitoring patients identified as being at high risk.

Which security measures support safe access and observation?

Design access control protocols around clear zones: public areas, staff-only areas, and patient-care spaces. Identify who may enter each zone, how staff and visitors are authenticated, how deliveries and contractors are supervised, and how doors are secured without blocking required emergency egress. Check that alarm, intercom, and communication systems have backup procedures for outages.

Set clear procedures for visitors, belongings, items brought into patient areas, and access to restricted supplies. Explain limits respectfully and consistently. Security measures should support care and dignity, not create unnecessary barriers or a custodial atmosphere.

Establish a written response for an attempted or actual unauthorized departure. The procedure should identify who is notified, who leads the immediate clinical reassessment, how staff coordinate safely, and when emergency services or other support are contacted. Make decisions about restrictions or return in accordance with applicable law, the person’s legal status, clinical judgment, and facility policy. Have qualified legal and clinical leaders review the procedure for the relevant jurisdiction.

Define patient observation levels in policy, including the clinical criteria for selecting and changing them, staff responsibilities, handoffs, documentation, and what to do if observation cannot be maintained as ordered. Match observation to the individual’s current needs and the environment; a camera, alarm, or general staff presence should not be treated as a substitute for an ordered level of direct observation. Train staff on how to carry out observation consistently and how to escalate concerns.

How can unit layout reduce self-harm and violence risks?

Use layout to make care areas easier to navigate, supervise, and access during an emergency. Reduce hidden or poorly observed spaces where feasible, provide clear sightlines from staffed locations, and ensure staff can summon help from patient-care areas. Consider where patients wait, where conversations occur, and whether a person can reach a quieter space without losing appropriate support.

Make the environment predictable and understandable. Clear signs, uncluttered routes, seating choices, and access to calming spaces can support a less stressful setting. Apply environmental suicide risk mitigation by identifying hazards in each space and matching safeguards to the people likely to use it, rather than relying on a single generic checklist.

Balance observation with privacy and dignity. Consider how doors, windows, and furniture affect staff visibility while still allowing appropriate privacy in bathrooms and other sensitive areas. Include patients, staff, and facilities personnel in reviewing whether design choices feel safe and workable in practice.

SAMHSA’s trauma-informed care guidance emphasizes safety, trust, collaboration, and empowerment. Use those principles when evaluating whether a layout or security feature could increase distress or make patients feel unnecessarily controlled.

What procedures and staffing support crisis-setting safety?

Maintain written procedures for screening and assessment, observation, visitor and belongings management, missing-patient response, violence prevention, staff alerts, incident reporting, and escalation to clinical leaders. Make sure staff can quickly find current procedures and know their role during a safety event.

Provide role-specific training in environmental checks, communication, calling for assistance, and trauma-informed de-escalation. Staff should use calm communication, offer choices when appropriate, explain actions clearly, and seek to reduce stimulation where possible. SAMHSA describes trauma-informed approaches as working to create safety and avoid retraumatization; see its trauma-informed approaches resources.

Clinical staff should lead the clinical response to acute agitation, including assessment and treatment decisions. Security personnel can support safety through defined, trained roles—such as managing public-area access, responding to staff calls for assistance, and helping protect clear routes for care. They should not replace clinical assessment or act as the clinical care team. A SAMHSA-hosted review of crisis receiving and stabilization facilities distinguishes security functions from clinical management of acute agitation.

Review incidents and near misses for patterns, then use the findings to improve procedures, training, staffing deployment, or the physical environment. OSHA’s workplace violence prevention guidance for hospitals recommends continual hazard assessment, incident reporting, staff training, and review of prevention efforts.

How should emergency preparedness address identified risks?

Connect the security assessment to the facility’s all-hazards emergency plan. Consider how power or communications failures, severe weather, fire, flooding, supply disruptions, cyber incidents, or a loss of part of the facility could affect patient safety, staffing, access control, observation, and continuity of care. CMS identifies risk assessment, planning, policies and procedures, communication, and training and testing as core elements of emergency preparedness; see its health care provider guidance.

Plan for sheltering in place and evacuation. Specify who makes decisions, how staff account for patients and personnel, how patients are transported and supported, where they may be transferred, and how the unit coordinates with emergency management, EMS, law enforcement, and receiving providers. Include primary and backup communication methods, accessible instructions, and procedures for maintaining or transferring essential clinical information.

Maintain emergency preparedness supplies in quantities matched to the unit’s census, patient needs, staffing, likely disruptions, and local requirements. A three-day planning horizon can be a useful preparedness target, but it is not a universal federal stockpile requirement for every crisis stabilization unit. For hospitals covered by 42 CFR § 482.15, the regulation addresses subsistence needs for patients and staff, including food, water, medical and pharmaceutical supplies, as well as alternate energy for specified safety functions; review the current hospital emergency preparedness regulation.

Depending on the hazard assessment, supplies and resources may include drinking water, shelf-stable food, essential medications and medical supplies, hygiene items, personal protective equipment, flashlights, batteries, first-aid supplies, backup communications, and arrangements for power, temperature control, sanitation, waste disposal, and fuel. Define storage, access, rotation, replenishment, and distribution responsibilities so supplies remain usable.

In summary, a useful assessment connects specific hazards to documented mitigations, trained staff, patient-centered access and observation procedures, and emergency plans that are tested and updated. Review it when risks or operations change, and confirm applicable requirements with your licensing agency, accreditor, and legal and clinical leadership.

FAQs

How often should a crisis stabilization unit update its security risk assessment?

There is no single update interval that applies to every crisis stabilization unit’s security risk assessment. Set a recurring review schedule and reassess sooner after an incident, near miss, construction project, service or population change, or change in access or staffing arrangements. Confirm any required schedule with the unit’s licensing agency, accreditor, and applicable regulations. For example, hospitals subject to 42 CFR § 482.15 must review and update their emergency preparedness plan at least every two years, but that requirement should not be mistaken for a universal interval for all security assessments.

Which areas require particular attention for ligature risks?

Pay particular attention to patient bedrooms, bathrooms and showers, quiet or sensory rooms, and any area where a patient may be alone or difficult to observe. Also inspect shared spaces and items brought into patient areas. Assess each location for potential ligature anchor points and other objects or features that could be used for self-harm, then document location-specific safeguards. The Joint Commission’s suicide risk reduction resources provide further guidance on environmental assessment and mitigation.

What role should security personnel have during acute patient agitation?

Security personnel should have a clearly defined support role, such as responding when clinical staff request assistance, helping manage public-area access, and maintaining safe routes. Clinical staff should lead patient assessment and care decisions. Train security personnel for healthcare settings, explain how they coordinate with clinicians, and specify escalation steps. SAMHSA’s crisis facility review distinguishes security duties from clinical management of acute agitation.

What emergency supplies and resources should a unit plan to maintain for at least three days?

Use the unit’s hazard assessment, census, patient needs, and local requirements to plan quantities. Consider drinking water, shelf-stable food, essential medications, medical and hygiene supplies, protective equipment, first-aid supplies, flashlights and batteries, backup communications, and arrangements for power, fuel, temperature control, and sanitation. Plan how supplies will be stored, monitored, rotated, and distributed during an emergency. A three-day supply is a planning target, not a universal federal requirement for every unit; CMS requirements depend on facility type and applicable rules.