A hospital estates team runs a World Health Organization (WHO) vulnerability check or completes the NHS Climate Change Risk Assessment (CCRA) Tool, and learns exactly which wards flood and which plant rooms lose power in a heatwave. What they don't get is a number. Finance wants to know what a flooded pharmacy costs, and an auditor wants the methodology behind that cost, not just the rating that produced it. Getting from a checklist to that figure takes five steps.
What is a physical climate risk assessment for healthcare?
A physical climate risk assessment for healthcare is the process of turning physical climate risk into a modelled financial figure for every hospital, care home and clinic you're responsible for, rather than a hazard rating checked once and filed away. Knowing a ward floods tells you where the water goes; it doesn't tell you what that flood is likely to cost the trust in a typical year, or in a genuinely bad one, which is exactly why physical climate risk requires an assessment rather than a red, amber or green rating.
For a healthcare estate specifically:
What physical climate risk covers here: flood, heat and water stress, each able to take a ward, a pharmacy or a plant room offline on its own, or compound with the others during the same event.
What a vulnerability rating alone leaves out: the number finance actually needs to size a budget, an annualised cost and an event cost, not a flag on a hazard map.
What does a physical climate risk assessment involve for a healthcare estate?
A physical climate risk assessment for a healthcare estate runs through five steps: hazard identification, exposure and vulnerability mapping, financial quantification, adaptation planning and audit-ready reporting, run across every hospital, care home and clinic rather than one flagged ward at a time.
Read together, they take you from a WHO or NHS vulnerability rating to a ranked, funded plan an auditor can test.
Here are the 5 steps:
Identify the hazards that matter most. Establish which climate hazards, flood, heat and water stress, actually threaten continuity of care across the estate, rather than assuming every site faces the same exposure.
Map exposure and vulnerability. Score exposure and vulnerability separately for each asset, then layer continuity-of-care factors, such as backup power and medication cold chains, on top.
Turn exposure into a financial figure. Convert the vulnerability finding into a modelled average annual loss and a probable maximum loss for every site.
Build an adaptation plan. Rank adaptation measures by return on investment, prioritising the sites carrying the highest expected loss across the whole estate.
Produce an audit-ready report. Document the methodology, assumptions and data lineage behind every figure so it survives external scrutiny.
How does a healthcare climate risk assessment differ from a standard WHO or NHS checklist?
A healthcare climate risk assessment differs from a WHO or NHS England checklist in what it produces at the end: a modelled financial figure and an audit trail, rather than a hazard rating alone. WHO's checklists and NHS England's Climate Change Risk Assessment (CCRA) Tool aren't falling short here; they're built to answer a clinical-vulnerability question well, and they do. A financially quantified assessment answers a different, later question: what does that vulnerability cost you, and what does fixing it justify spending.
Neither gap is a flaw in WHO's or NHS England's own tools. You still need the vulnerability baseline before you can model a financial figure from it, and the financial step depends entirely on that vulnerability work being right first. The difference only shows up in what happens after the checklist is filed: whether you walk into a budget meeting with a number, or only with a rating.
What climate hazards matter most for hospitals and care facilities?
Flood, heat and water stress carry the sharpest continuity-of-care consequences for hospitals and care facilities, ahead of wind in most UK healthcare estates. This is the first of the five steps below.
Look for:
Flood: Ground-floor plant rooms, pharmacies and medical gas stores sit at the depths UK flood models actually test, and a flooded plant room can take an entire ward offline rather than just the room it sits in. Losing power or oxygen supply mid-admission is a different category of consequence to losing a car park for a day.
Heat: Care homes and wards with limited mechanical cooling see the sharpest resident and patient risk, since medication storage and vulnerable occupants both have narrow temperature tolerances. England recorded 2,803 excess deaths among people aged 65 and over during the 2022 summer heat-periods, the highest since heat mortality monitoring began in 2004, and a cooling failure during a heatwave can force a temporary transfer of residents that most care homes have no rehearsed process for.
Water stress: Sterilisation, cooling and basic hygiene capacity all depend on water supply, and chronic water stress is a slower-moving risk than flood or heat that shows up in long-term capital planning rather than a single event. An estates team tracking only acute hazards can miss a site heading toward a supply constraint years before it becomes a crisis.
Wind: Storm-force wind events happen less often than flood or heat across most UK healthcare estates, but recovery time matters when a damaged roof or a downed power line takes a facility offline for days rather than hours. Backup generators sized for a flood scenario do not always cover a multi-day wind-driven power outage.
These hazards also compound on staffing, not just estate condition. A heatwave that raises patient and resident risk on the wards can simultaneously disrupt the travel routes staff rely on to reach a hospital or care home for a shift, and when extreme heat closes local schools, staff without childcare cover are pulled from the rota at the same moment clinical demand and cooling failures both peak.
How do you map exposure and vulnerability across a healthcare estate?
Mapping exposure and vulnerability across a healthcare estate means scoring exposure and vulnerability separately for each asset, then layering continuity-of-care factors on top. This is the second step, and it works best run as three steps in that order:
Map exposure at asset level. Pull a hazard map for each individual building, not an estate-wide average that buries one exposed site among many low-risk ones. Two hospitals a mile apart on the same trust's estate can carry entirely different flood or heat exposure.
Score vulnerability by asset type, separately from exposure. The same flood depth means something different to a car park than to a plant room holding backup power, so score vulnerability by what the asset actually does, not by hazard alone. A plant room and a car park at identical flood depth carry very different consequences for the trust.
Layer continuity of care on top of both. Give backup power, medication cold chains and patient transfer capacity their own line in the assessment. A building can sit inside a flood plain on the map and still keep functioning through an event if those three hold, so mapping the hazard without mapping these three only tells you where the water goes, not whether care continues.
How do you turn hazard exposure into a financial figure?
Turning hazard exposure into a financial figure means attaching a modelled cost, not just a rating, to every site a hospital or care home depends on, following the same PCRAM and CRIF methodology used across other multi-site estates. This is the third step, and the one that separates a checklist from a financially quantified assessment. What good looks like:
A modelled average annual loss (AAL): Every site gets one expected annual cost, not a five-point severity scale, so finance teams can compare a hospital against a care home on the same basis. That single figure is what turns a portfolio of ratings into a ranked list finance can act on, and it answers the question a budget conversation starts with: what should we expect to lose in a typical year?
A probable maximum loss (PML) at material return periods: A 1-in-100-year or 1-in-200-year figure lets a finance director weigh a rare but severe event against the cost of preventing it. Boards tend to ask about the tail event, not the average year, so both figures need to sit side by side, and PML is what answers their question: how costly would a really bad event be, at the plausible worst case?
A single methodology across every site: Using one modelled approach across every hospital, care home and clinic means the AAL and PML for a 1980s hospital and a newly built clinic sit on the same basis, so portfolio-wide comparisons hold up. Mixing methodologies site by site makes any estate-wide ranking unreliable.
A figure finance can challenge, not just accept: The assumptions behind AAL and PML need documenting well enough that a finance team can challenge them rather than accept a total on trust. A figure nobody can interrogate gets treated the same way a vague rating does.
How do you build an adaptation plan from the assessment?
Building an adaptation plan from the assessment means ranking measures by return on investment, prioritising the sites step three showed carry the highest expected loss. This is the fourth step. A flat, unranked list of measures forces a board to guess at priority, and guessing usually defaults to whichever measure is cheapest rather than whichever measure matters most. Questions to ask directly:
Which sites carry the highest expected loss?
Adaptation spend gets sequenced against the AAL and PML figures from the financial-quantification step, not against which measures are simplest to install first. The site with the highest expected loss goes first, even if it is not the cheapest fix.
Which measures pay back fastest?
Backup power, flood barriers and improved drainage each carry a different cost and a different return, and ranking them by return turns a list of options into a plan a board can approve. Two measures with the same upfront cost rarely carry the same payback period.
What happens if nothing changes?
A credible adaptation plan states the cost of inaction alongside the cost of each measure, so a board sees a choice rather than a single recommendation. Naming the cost of doing nothing is what makes the spending case defensible rather than optional.
Practical tip: Sequence adaptation measures by the sites the financial-quantification step showed carry the highest expected loss, not by which measures are cheapest to install first.
What does audit-ready reporting look like for a healthcare estate?
Audit-ready reporting for a healthcare estate documents the methodology, assumptions and data lineage behind every figure, not just a summary of findings. This is the fifth and final step. Get clear, written answers on:
What methodology produced each figure: A report needs to show the hazard data, the emissions scenario and the damage function behind every AAL and PML, not just the totals. An auditor should be able to trace any single figure back to the assumption that produced it.
What assumptions were made and why: Time horizons, asset values and vulnerability scores all rest on assumptions, and an auditor needs those stated rather than embedded silently inside a number. An assumption stated in a footnote survives scrutiny better than one buried in a spreadsheet nobody sees.
How the figure gets reviewed and updated: Hazard data and asset values both change, so a report needs a stated review cycle rather than a one-off snapshot filed and forgotten. A figure two years out of date invites the same challenge as one with no methodology behind it at all.
How do WHO, NHS CCRA and PCRAM fit together?
WHO's checklists, the NHS CCRA Tool and the Physical Climate Risk Assessment Methodology (PCRAM) answer three different questions rather than compete for the same one.
Treating the three as competitors misses the point that each hands off to the next, starting with a WHO baseline and ending with a financial figure built for healthcare specifically.
How SmartResilience helps you quantify physical climate risk across a healthcare estate
Most estates teams reach the same point after a first vulnerability check: a rating for every hospital, care home or clinic, and no figure a finance director will act on. SmartResilience Climate Assessments closes that gap for flood today, applied here to a healthcare estate, extending coverage to the remaining hazards as that work develops:
A financial figure per site: The platform reports an average annual loss and a probable maximum loss at material return periods for flood exposure today, with heat and water stress quantification in development, using one methodology across every hospital, care home or clinic in the estate.
Adaptation measures ranked by return: Estates teams see which measures, from backup power to flood barriers around plant rooms, pay back and over what period, so a capital request carries a number rather than a recommendation.
An audit trail behind every figure: An external auditor can trace the hazard data, the scenario and the assumptions behind each figure back through the platform, rather than take a summary on trust.
The same methodology already runs across other multi-site estates outside healthcare. Sainsbury's runs early warning across 1,000+ sites and avoided a £3m flood damage event, the kind of outcome a healthcare estate's finance director is asking the same question about: what would this event have cost, and what does preventing it justify spending.
SmartResilience
See SmartResilience in action
Book a free demo tailored to your organisation and assets.
Book a free demoWhat's next
The estates team that turns its next WHO or NHS CCRA check into a modelled financial figure is the one whose adaptation budget clears finance and survives an audit on the first pass, rather than going back for a second round of questions. That is the decision in front of any healthcare estate that has already run a vulnerability check and is now looking at what comes after it, and SmartResilience's guide to physical risk reporting sets out what a report built to survive that scrutiny actually contains.
FAQs
What are the steps in a physical climate risk assessment for a healthcare estate? Five steps: identify the climate hazards that matter most, map exposure and vulnerability at asset level, turn that exposure into a financial figure, build an adaptation plan ranked by return, and produce an audit-ready report documenting the methodology behind it.
How is this different from a standard NHS or WHO vulnerability checklist? A WHO checklist or the NHS CCRA Tool identifies which services are vulnerable to which hazards and produces a risk score. A financially quantified assessment carries that finding further, into a modelled AAL and PML an auditor can test.
What climate hazards does the NHS CCRA Tool cover? The NHS Climate Change Risk Assessment (CCRA) Tool is a downloadable tool that helps NHS trusts, system leaders and other NHS organisations identify climate-related risks specific to their operations, understand the potential impact on healthcare delivery, plan a response through identifying potential adaptations, progress toward NHS net zero commitments, and maintain service continuity during climate disruptions.
What climate hazards matter most for hospitals and care facilities? Flood, heat and water stress carry the sharpest continuity-of-care consequences in most UK healthcare estates, since they affect plant rooms, medication storage and basic hygiene capacity directly. Flood and heat are acute, sudden-onset hazards, while water stress is chronic and slower-moving, and the two categories of acute and chronic risk need different monitoring.
How do you turn a healthcare climate risk assessment into a financial and adaptation plan? Attach a modelled average annual loss and probable maximum loss to every site, then rank adaptation measures by return on investment against the sites carrying the highest expected loss.
What frameworks are relevant to a healthcare climate risk assessment, and how do they relate? WHO and the NHS CCRA Tool answer the vulnerability question. PCRAM answers the financial-quantification question. A healthcare-adapted assessment applies PCRAM's approach to the sector WHO and NHS CCRA already cover clinically.
Does a WHO or NHS CCRA checklist need to be completed before a financially quantified assessment? Yes. The financial step models cost against the vulnerability findings the checklist produces, so it needs that baseline as an input rather than replacing it. Skipping the checklist leaves the financial model with nothing to quantify.
