--- title: "Hazard, Hazardous Situation, and Harm… | MedTech Terms" description: "ISO 14971 distinction underpinning all medical-device risk analysis. Plain-English Quality & Risk definition for MedTech teams, with examples and related terms." lang: en json-ld: | { "@context": "https://schema.org", "@graph": [ { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/hazard-vs-harm#term", "name": "Hazard, Hazardous Situation, and Harm", "description": "A hazard is a potential source of harm. A hazardous situation occurs when people, property, or the environment are exposed to a hazard. Harm is injury or damage to health that results from exposure during a hazardous situation.", "url": "https://medtechterms.com/terms/hazard-vs-harm", "termCode": "hazard-vs-harm", "inDefinedTermSet": { "@type": "DefinedTermSet", "name": "MedTech Terms", "url": "https://medtechterms.com/terms" } }, { "@type": "Article", "@id": "https://medtechterms.com/terms/hazard-vs-harm#article", "headline": "Hazard, Hazardous Situation, and Harm", "description": "ISO 14971 distinction underpinning all medical-device risk analysis.", "url": "https://medtechterms.com/terms/hazard-vs-harm", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://medtechterms.com/terms/hazard-vs-harm" }, "about": { "@id": "https://medtechterms.com/terms/hazard-vs-harm#term" }, "articleSection": "Quality & Risk", "inLanguage": "en", "keywords": "Hazard, Hazardous Situation, and Harm, Quality & Risk, medical device, MedTech", "author": { "@type": "Person", "name": "Christian Espinosa", "jobTitle": "Founder, Blue Goat Cyber", "url": "https://bluegoatcyber.com" }, "publisher": { "@type": "Organization", "name": "MedTech Terms", "url": "https://medtechterms.com" }, "isPartOf": { "@type": "WebSite", "name": "MedTech Terms", "url": "https://medtechterms.com" }, "datePublished": "2026-05-05", "dateModified": "2026-05-05", "citation": [ { "@type": "CreativeWork", "name": "ISO 14971:2019", "url": "https://www.iso.org/standard/72704.html", "publisher": { "@type": "Organization", "name": "ISO" } }, { "@type": "CreativeWork", "name": "ISO 13485 Standard Page", "url": "https://www.iso.org/iso-13485-medical-devices.html", "publisher": { "@type": "Organization", "name": "ISO" } }, { "@type": "CreativeWork", "name": "AAMI - Quality Systems Resources", "url": "https://www.aami.org/standards", "publisher": { "@type": "Organization", "name": "AAMI" } } ], "mentions": [ { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/iso-14971#term", "name": "ISO 14971", "url": "https://medtechterms.com/terms/iso-14971" }, { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/tr24971#term", "name": "ISO/TR 24971", "url": "https://medtechterms.com/terms/tr24971" }, { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/risk-management-file#term", "name": "Risk Management File", "alternateName": "RMF", "url": "https://medtechterms.com/terms/risk-management-file" } ] }, { "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://medtechterms.com/" }, { "@type": "ListItem", "position": 2, "name": "Terms", "item": "https://medtechterms.com/terms" }, { "@type": "ListItem", "position": 3, "name": "Quality & Risk", "item": "https://medtechterms.com/terms?cat=Quality%20%26%20Risk" }, { "@type": "ListItem", "position": 4, "name": "Hazard, Hazardous Situation, and Harm", "item": "https://medtechterms.com/terms/hazard-vs-harm" } ] }, { "@type": "FAQPage", "@id": "https://medtechterms.com/terms/hazard-vs-harm#faq", "mainEntity": [ { "@type": "Question", "name": "How do these terms relate to cybersecurity risks?", "acceptedAnswer": { "@type": "Answer", "text": "In cybersecurity, a vulnerability in a medical device can be considered a hazard. A hazardous situation arises when that vulnerability is exploited, potentially leading to unauthorized access, data compromise, or device malfunction, which then results in harm to the patient or operator." } }, { "@type": "Question", "name": "Why is it important to distinguish between these terms?", "acceptedAnswer": { "@type": "Answer", "text": "Distinguishing these terms is crucial for effective risk management. It allows manufacturers to precisely identify where in the chain of events risk controls can be applied, thereby preventing hazardous situations or mitigating the severity of harm." } }, { "@type": "Question", "name": "Can a single hazard lead to multiple types of harm?", "acceptedAnswer": { "@type": "Answer", "text": "Yes, a single hazard can indeed lead to multiple types of harm. For example, an electrical fault (hazard) in a device could lead to an electric shock (harm) for the patient and also render the device inoperable, delaying critical treatment (another form of harm)." } } ] } ] } --- [ MedTech Terms The authoritative reference ](/) Browse Learn [Latest](/latest) About 1. [Home](/) 2. / 3. [Terms](/terms) 4. / 5. [Quality & Risk](/terms?cat=Quality%20%26%20Risk) 6. / 7. Hazard, Hazardous Situation, and Harm [All terms](/terms) Quality & Risk [Quality System](/ecosystems/quality-system) # Hazard, Hazardous Situation, and Harm ISO 14971 distinction underpinning all medical-device risk analysis. Reviewed by [Christian Espinosa, Founder, Blue Goat Cyber](/authors/christian-espinosa) Last reviewed May 5, 2026 ## Definition A hazard is a potential source of harm. A hazardous situation occurs when people, property, or the environment are exposed to a hazard. Harm is injury or damage to health that results from exposure during a hazardous situation. What the regulation says Under [ISO 14971](/terms/iso-14971):2019, the international standard for risk management of medical devices, these terms are fundamental to the risk management process. Regulators worldwide, including the FDA and those enforcing the EU [MDR](/terms/mdr-reporting), expect manufacturers to identify hazards, characterize hazardous situations, and estimate harm as part of a comprehensive risk analysis, as outlined in ISO 14971:2019 clause 4.3 and Annex E. The [IMDRF](/terms/imdrf) also emphasizes these distinctions in its guidance on MedTech risk management. ## What this means in practice Many risk tables conflate these terms. Correctly modeling the chain hazard → sequence of events → hazardous situation → harm is essential for defensible risk control decisions. ## Examples - A sharp edge on a device (hazard) moving into proximity with a patient during use (hazardous situation) could cause a laceration (harm). - A software defect (hazard) that causes incorrect data display (hazardous situation) could lead a clinician to administer an incorrect dose of medication (harm). - A power supply failure (hazard) during a surgical procedure (hazardous situation) could result in the loss of critical device function and injury to the patient (harm). Common pitfalls - • Conflating "hazard" with "hazardous situation" can lead to an incomplete or inaccurate risk analysis, potentially missing crucial risk controls. - • Failing to clearly define the sequence of events leading from a hazard to a hazardous situation and then to harm can obscure the true risk. - • Assuming all hazards will automatically lead to harm without considering intervening events or mitigating factors is a common error. - • Overlooking indirect or latent harms that may manifest after a significant time delay can lead to underestimation of risk. - • Not comprehensively identifying all potential hazardous situations for a given hazard can result in inadequate risk control measures. ## Frequently asked questions How do these terms relate to cybersecurity risks? In cybersecurity, a vulnerability in a medical device can be considered a hazard. A hazardous situation arises when that vulnerability is exploited, potentially leading to unauthorized access, data compromise, or device malfunction, which then results in harm to the patient or operator. Why is it important to distinguish between these terms? Can a single hazard lead to multiple types of harm? ## Cross-references ### Used by Things that build on this term. - [ ISO 14971 ](/terms/iso-14971) ## Related terms Grouped by theme ### Editor's picks · Hand-selected related concepts [ Quality & Risk Risk Management File(RMF) Set of records and outputs from the ISO 14971 risk management process. ](/terms/risk-management-file)[ Standards ISO 14971 International standard for the application of risk management to medical devices. ](/terms/iso-14971)[ Standards ISO/TR 24971 Guidance on the application of ISO 14971 to medical devices. ](/terms/tr24971) ### More in Quality & Risk · Same category [ Quality & Risk Biocompatibility Ability of a material to perform with an appropriate host response in a specific application. ](/terms/biocompatibility)[ Quality & Risk CAPA Effectiveness Check Verification step confirming a corrective or preventive action actually fixed the problem. ](/terms/capa-effectiveness)[ Quality & Risk Change Control Formal QMS process for evaluating, approving, and implementing changes that could affect product quality or compliance. ](/terms/change-control)[ Quality & Risk Complaint Handling Process for receiving, evaluating, and responding to device complaints. ](/terms/complaint-handling) Cited by Where this term appears across MedTech Terms. Ecosystems (1) - [Quality System](/ecosystems/quality-system) ## Primary references 3 sources Link health: 3 verified · last checked 2026-06-20 ISO· 2 AAMI· 1 1. [1 ISO 14971:2019 Verified ISO · iso.org ](https://www.iso.org/standard/72704.html) 2. [2 ISO 13485 Standard Page Verified ISO · iso.org ](https://www.iso.org/iso-13485-medical-devices.html) 3. [3 AAMI - Quality Systems Resources Verified AAMI · aami.org ](https://www.aami.org/standards) Inline markers like \[1\] jump to the matching reference above. Sponsor note ### Tying cybersecurity into your QMS? We help align cybersecurity activities with ISO 13485 design controls and ISO 14971 risk management. [Book a 30-minute discovery session](https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-session) - No obligation - Expert-led from minute one - NDA available on request MedTech Terms is a community resource sponsored by [Blue Goat Cyber](https://bluegoatcyber.com). Definitions are independent of any vendor. On this term Category Quality & Risk Sources 3 Updated 5/5/2026 [Compare with another term](/compare?a=hazard-vs-harm) Learn in 60 seconds Card Lesson Quiz ISO 14971 distinction underpinning all medical-device risk analysis. - · Many risk tables conflate these terms. - · Correctly modeling the chain hazard → sequence of events → hazardous situation → harm is essential for defensible risk control decisions. - · A hazardous situation occurs when people, property, or the environment are exposed to a hazard. Remember this Watch out: Conflating "hazard" with "hazardous situation" can lead to an incomplete or inaccurate risk analysis, potentially missing crucial risk controls. Related terms - [ISO 14971 ](/terms/iso-14971) - [ISO/TR 24971 ](/terms/tr24971) - [Risk Management File(RMF) ](/terms/risk-management-file) You may also need Auto-suggested from Quality & Risk and shared keywords. - [Software Safety Classification ](/terms/software-safety-class) - [Use-Related Risk Analysis(URRA) ](/terms/urra) - [AI Act Serious Incident Reporting ](/terms/ai-act-serious-incident-reporting) - [Class III Device ](/terms/class-iii) - [Health Hazard Evaluation(HHE) ](/terms/health-hazard-eval) - [Failure Mode and Effects Analysis(FMEA) ](/terms/fmea) [All Quality & Risk terms](/terms?cat=Quality%20%26%20Risk) From the Blue Goat network Related resources and services on this topic. - [ MedTech Truths Common misconceptions about medical device development - debunked. ](https://mdcmisconceptions.com) MedTech Terms An authoritative, plain-language reference for the regulatory, quality, cybersecurity, and software terms that shape modern medical devices. Browse - [All terms](/terms) - [A–Z index](/a-z) - [Categories](/categories) - [Ecosystems](/ecosystems) - [Learning paths](/paths) - [Compare terms](/compare) - [Quiz](/quiz) Resources - [FDA Medical Devices](https://www.fda.gov/medical-devices) - [EU MDR](https://eur-lex.europa.eu/eli/reg/2017/745/oj) - [IMDRF](https://www.imdrf.org/) - [Methodology](/methodology) - [Changelog](/changelog) - [Editor: Christian Espinosa](/authors/christian-espinosa) - [About this site](/about) © 2026 MedTech Terms. Reference content for educational purposes - not regulatory advice. A community resource sponsored by [Blue Goat Cyber](https://bluegoatcyber.com)