Risk management means recognizing risks, assessing risks and managing risks. In hospitals, this mostly means using a critical incident reporting system (CIRS), however risk management in the sense of disaster planning is largely unknown. With a three-dimensional risk matrix, we showed a clear correlation between the quality of disaster planning and relative risk or financial damage. To substantiate the presented theoretical considerations, however, further research must be designed and implemented.