Photo of the day: Incident Investigations
19 min readWhen workplace incidents happen, they must be investigated properly and by the right individuals. As incidents have the potential to result in injury, illness, and fatalities, it is important for the investigators to identify the root cause so future incidents can be prevented. Key areas to explore include the task, material, environment, personnel, and management. By taking a deeper look into these areas, investigators can find out the facts, and create and implement a plan for corrective action.
on the photo of today, you will have knowledge on how to conduct an incident investigation in the workplace, including who should do the investigation, and how to conduct, conclude and communicate findings. See the Incident Investigation Technique guideline for additional information and resources.
What is an incident and why should it be investigated?
The term incident can be defined as an occurrence, condition, or situation arising in the course of work that resulted in or could have resulted in injuries, illnesses, damage to health, or fatalities.
The term “accident” is also commonly used and can be defined as an unplanned event that interrupts the completion of an activity, and that may (or may not) include injury or property damage. Some make a distinction between accident and incident. They use the term incident to refer to an unexpected event that did not cause injury or damage at that time but had the potential. “Near miss” or “dangerous occurrence” are also terms for an event that could have caused harm but did not.
Please note: The term incident is used in some situations and jurisdictions to cover both an “accident” and “incident”. It is argued that the word “accident” implies that the event was related to fate or chance. When the root cause is determined, it is usually found that many events were predictable and could have been prevented if the right actions were taken – making the event not one of fate or chance (thus, the word incident is used). For simplicity, we will now use the term incident to mean all of the above events.
The information that follows is intended to be a general guide for employers, supervisors, health and safety committee members, or members of an incident investigation team. When incidents are investigated, the emphasis should be concentrated on finding the root cause of the incident so you can prevent the event from happening again. The purpose is to find facts that can lead to corrective actions, not to find fault. Always look for deeper causes. Do not simply record the steps of the event.
Reasons to investigate a workplace incident include:
- most importantly, to find out the cause of incidents and to prevent similar incidents in the future
- to fulfill any legal requirements
- to determine the cost of an incident
- to determine compliance with applicable regulations (e.g., occupational health and safety, criminal, etc.)
- to process workers’ compensation claims
The same principles apply to an inquiry of a minor incident and to the more formal investigation of a serious event. Most importantly, these steps can be used to investigate any situation (e.g., where no incident has occurred … yet) as a way to prevent an incident.
Who should do the investigating?
Ideally, an investigation would be conducted by someone or a group of people who are:
- experienced in incident causation models,
- experienced in investigative techniques,
- knowledgeable of any legal or organizational requirements,
- knowledgeable in occupational health and safety fundamentals,
- knowledgeable in the work processes, procedures, persons, and industrial relations environment for that particular situation,
- able to use interview and other person-to-person techniques effectively (such as mediation or conflict resolution),
- knowledgeable of requirements for documents, records, and data collection; and
- able to analyze the data gathered to determine findings and reach recommendations.
Some jurisdictions provide guidance such as requiring that the incident must be conducted jointly, with both management and labor represented, or that the investigators must be knowledgeable about the work processes involved.
Members of the team can include:
- employees with knowledge of the work
- supervisor of the area or work
- safety officer
- health and safety committee
- union representative, if applicable
- employees with experience in investigations
- “outside” experts
- a representative from local government or police
Note: In some cases, other authorities may have jurisdiction, such as if a serious injury or fatality occurred. Your organization should establish, implement, and maintain a procedure to coordinate managing incidents with the authority having jurisdiction (e.g., police, OH&S inspectors, etc.). This coordination may include the authority taking control of the incident scene.
Should the immediate supervisor be on the team?
The advantage is that this person is likely to know most about the work and persons involved and the current conditions. Furthermore, the supervisor can usually take immediate remedial action. The counterargument is that there may be an attempt to gloss over the supervisor’s shortcomings in the incident. This situation should not arise if the incident is investigated by a team of people and if the worker representative(s) and the investigation team members review all incident investigation findings and recommendations thoroughly.
Why look for the root cause?
An investigator or team who believes that incidents are caused by unsafe conditions will likely try to uncover conditions as causes. On the other hand, one who believes they are caused by unsafe acts will attempt to find the human errors that cause. Therefore, it is necessary to examine all underlying factors in a chain of events that ends in an incident.
The important point is that even in the most seemingly straightforward incidents, seldom, if ever, is there only a single cause. For example, an “investigation” which concludes that an incident was due to worker carelessness, and goes no further, fails to find answers to several important questions such as:
- Was the worker distracted? If yes, why was the worker distracted?
- Was a safe work procedure being followed? If not, why not?
- Were safety devices in order? If not, why not?
- Was the worker trained? If not, why not?
An inquiry that answers these and related questions will probably reveal conditions that are more open to correction.
What are the steps involved in investigating an incident?
First:
- Report the incident occurrence to a designated person within the organization.
- Provide first aid and medical care to an injured person(s) and prevent further injuries or damage.
The incident investigation team would perform the following general steps:
- Scene management and scene assessment (secure the scene, make sure it is safe for investigators to do their job).
- Witness management (provide support, limit interaction with other witnesses, interview).
- Investigate the incident, collect data.
- Analyze the data, identify the root causes.
- Report the findings and recommendations.
The organization would then:
- Develop a plan for corrective action.
- Implement the plan.
- Evaluate the effectiveness of the corrective action.
- Make changes for continual improvement.
As little time as possible should be lost between the moment of an incident and the beginning of the investigation. In this way, one is most likely to be able to observe the conditions as they were at the time, prevent disturbance of evidence, and identify witnesses. The tools that members of the investigating team may need (pencil, paper, camera or recording device, tape measure, etc.) should be immediately available so that no time is wasted.
What should be looked at as the cause of an incident?
Causation Models
Many models of causation have been proposed, ranging from Heinrich’s domino theory to the sophisticated Management Oversight and Risk Tree (MORT).
The simple model is shown in Figure 1 attempts to illustrate that the causes of any incident can be grouped into five categories – task, material, environment, personnel, and management. When this model is used, possible causes in each category should be investigated. Each category is examined more closely below. Remember that these are sample questions only: no attempt has been made to develop a comprehensive checklist.
Task
Here the actual work procedure being used at the time of the incident is explored. Members of the investigation team will look for answers to questions such as:
- Was a safe work procedure used?
- Had conditions changed to make the normal procedure unsafe?
- Were the appropriate tools and materials available?
- Were they used?
- Were safety devices working properly?
- Was lockout used when necessary?
For most of these questions, an important follow-up question is “If not, why not?”
Material
To seek out possible causes resulting from the equipment and materials used, investigators might ask:
- Was there an equipment failure?
- What caused it to fail?
- Was the machinery poorly designed?
- Were hazardous products involved?
- Were they clearly identified?
- Was a less hazardous alternative product possible and available?
- Was the raw material substandard in some way?
- Should personal protective equipment (PPE) have been used?
- Was the PPE used?
- Were users of PPE properly educated and trained?
Again, each time the answer reveals an unsafe condition, the investigator must ask why this situation was allowed to exist.
Work Environment
The physical work environment, and especially sudden changes to that environment, are factors that need to be identified. The situation at the time of the incident is what is important, not what the “usual” conditions were. For example, investigators may want to know:
- What were the weather conditions?
- Was poor housekeeping a problem?
- Was it too hot or too cold?
- Was noise a problem?
- Was there adequate light?
- Were toxic or hazardous gases, dust, or fumes present?
Personnel
The physical and mental condition of those individuals directly involved in the event must be explored, as well as the psychosocial environment they were working within. The purpose of investigating the incident is not to establish blame against someone but the inquiry will not be complete unless personal characteristics or psychosocial factors are considered. Some factors will remain essentially constant while others may vary from day to day:
- Did the worker follow the safe operating procedures?
- Were workers experienced in the work being done?
- Had they been adequately educated and trained?
- Can they physically do the work?
- What was the status of their health?
- Were they tired?
- Was fatigue or shiftwork an issue?
- Were they under stress (work or personal)?
- Was there pressure to complete tasks under a deadline, or to bypass safety procedures?
Management
Management holds the legal responsibility for the safety of the workplace and therefore the role of supervisors and higher management and the role or presence of management systems must always be considered in an incident investigation. These factors may also be called organizational factors. Failures of management systems are often found to be direct or indirect causes. Ask questions such as:
- Were safety rules or safe work procedures communicated to and understood by all employees?
- Were written procedures and orientation available?
- Were the safe work procedures being enforced?
- Was there adequate supervision?
- Were workers educated and trained to do the work?
- Had hazards and risks been previously identified and assessed?
- Had procedures been developed to eliminate the hazards or control the risks?
- Were unsafe conditions corrected?
- Was regular maintenance of equipment carried out?
- Were regular safety inspections carried out?
- Had the condition or concern been reported beforehand?
- Was action taken?
This model of incident investigation provides a guide for uncovering all possible causes and reduces the likelihood of looking at facts in isolation. Some investigators may prefer to place some of the sample questions in different categories; however, the categories are not important, as long as each question is asked. Obviously, there is considerable overlap between categories; this overlap reflects the situation in real life. Again it should be emphasized that the above sample questions do not make up a complete checklist, but are examples only.
How are the facts collected?
The steps in the investigation are simple: the investigators gather data, analyze it, determine their findings, and make recommendations. Although the procedures are seemingly straightforward, each step can have its pitfalls. As mentioned above, an open mind is necessary in an investigation: preconceived notions may result in some wrong paths being followed while leaving some significant facts uncovered. All possible causes should be considered. Making notes of ideas as they occur is a good practice but conclusions should not be made until all the data is gathered.
Physical Evidence
Before attempting to gather information, examine the site for a quick overview, take steps to preserve evidence, and identify all witnesses. In some jurisdictions, an incident site must not be disturbed without approval from appropriate government officials such as the coroner, inspector, or police. Physical evidence is probably the most non-controversial information available. It is also subject to rapid change or obliteration; therefore, it should be the first to be recorded. Based on your knowledge of the work process, you may want to check items such as:
- positions of injured workers
- equipment being used
- products being used
- safety devices in use
- position of appropriate guards
- position of controls of machinery
- damage to equipment
- housekeeping of area
- weather conditions
- lighting levels
- noise levels
- time of day
You may want to take photographs before anything is moved, both of the general area and specific items. A later study of the pictures may reveal conditions or observations that were missed initially. Sketches of the scene based on measurements taken may also help in the later analysis and will clarify any written reports. Broken equipment, debris, and samples of materials involved may be removed for further analysis by appropriate experts. Even if photographs are taken, written notes about the location of these items at the scene should be prepared.
Witness Accounts
Although there may be occasions when you are unable to do so, every effort should be made to interview witnesses. In some situations, witnesses may be your primary source of information because you may be called upon to investigate an incident without being able to examine the scene immediately after the event. Because witnesses may be under severe emotional stress or afraid to be completely open for fear of recrimination, interviewing witnesses is probably the hardest task facing an investigator.
Witnesses should be kept apart and interviewed as soon as possible after the incident. If witnesses have an opportunity to discuss the event among themselves, individual perceptions may be lost in the normal process of accepting a consensus view where doubt exists about the facts.
Witnesses should be interviewed alone, rather than in a group. You may decide to interview a witness at the scene where it is easier to establish the positions of each person involved and to obtain a description of the events. On the other hand, it may be preferable to carry out interviews in a quiet office where there will be fewer distractions. The decision may depend in part on the nature of the incident and the mental state of the witnesses.
Interviewing
The purpose of the interview is to establish an understanding with the witness and to obtain his or her own words describing the event:
DO…
- put the witness, who is probably upset, at ease
- emphasize the real reason for the investigation, to determine what happened and why
- let the witness talk, listen
- confirm that you have the statement correct
- try to sense any underlying feelings of the witness
- make short notes or ask someone else on the team to take them during the interview
- ask if it is okay to record the interview if you are doing so
- close on a positive note
DO NOT…
- intimidate the witness
- interrupt
- prompt
- ask leading questions
- show your own emotions
- jump to conclusions
Ask open-ended questions that cannot be answered by simply “yes” or “no”. The actual questions you ask the witness will naturally vary with each incident, but there are some general questions that should be asked each time:
- Where were you at the time of the incident?
- What were you doing at the time?
- What did you see, hear?
- What were the work environment conditions (weather, light, noise, etc.) at the time?
- What was (were) the injured worker(s) doing at the time?
- In your opinion, what caused the incident?
- How might similar incidents be prevented in the future?
Asking questions is a straightforward approach to establishing what happened. But, care must be taken to assess the accuracy of any statements made in the interviews.
Another technique sometimes used to determine the sequence of events is to re-enact or replay them as they happened. Care must be taken so that further injury or damage does not occur. A witness (usually the injured worker) is asked to reenact in slow motion the actions that happened before the incident.
Other Information
Data can be found in documents such as technical datasheets, health, and safety committee minutes, inspection reports, company policies, maintenance reports, past incident reports, safe-work procedures, and training reports. Any relevant information should be studied to see what might have happened, and what changes might be recommended to prevent the recurrence of similar incidents.
What should I know when making the analysis and recommendations?
At this stage of the investigation, most of the facts about what happened and how it happened should be known. This data gathering has taken considerable effort to accomplish but it represents only the first half of the objective. Now comes the key question – why did it happen?
Keep an open mind to all possibilities and look for all pertinent facts. There may still be gaps in your understanding of the sequence of events that resulted in the incident. You may need to re-interview some witnesses or look for other data to fill these gaps in your knowledge.
When your analysis is complete, write down a step-by-step account of what happened (the team’s conclusions) working back from the moment of the incident, listing all possible causes at each step. This is not extra work: it is a draft for part of the final report. Each conclusion should be checked to see if:
- it is supported by evidence
- the evidence is direct (physical or documentary) or based on eyewitness accounts, or
- the evidence is based on assumptions.
This list serves as a final check on discrepancies that should be explained.
Why should recommendations be made?
The most important final step is to come up with a set of well-considered recommendations designed to prevent recurrences of similar incidents. Recommendations should:
- be specific
- be constructive
- identify root causes
- identify contributing factors
Resist the temptation to make only general recommendations to save time and effort.
For example, you have determined that a blind corner contributed to an incident. Rather than just recommending “eliminate blind corners” it would be better to suggest:
- install mirrors at the northwest corner of building X (specific to this incident)
- install mirrors at blind corners where required throughout the worksite (general)
Never make recommendations about disciplining a person or persons who may have been at fault. This action would not only be counter to the real purpose of the investigation, but it would jeopardize the chances for a free flow of information in future investigations.
In the unlikely event that you have not been able to determine the causes of an incident with complete certainty, you probably still have uncovered weaknesses within the process or management system. It is appropriate that recommendations be made to correct these deficiencies.
The Written Report
The prepared draft of the sequence of events can now be used to describe what happened. Remember that readers of your report do not have the intimate knowledge of the incident that you have so included all relevant details, including photographs and diagrams. Identify clearly where evidence is based on certain facts, witness accounts, or on the team’s assumptions. ( download: Incident-report-form/ )
If doubt exists about any particular part of the event, say so. The reasons for your conclusions should be stated and followed by your recommendations. Do not include extra material that is not required for a full understanding of the incident and its causes such as photographs that are not relevant and parts of the investigation that led you nowhere. The measure of a good report is quality, not quantity.
Always communicate your findings and recommendations with workers, supervisors, and management. Present your information ‘in context’ so everyone understands how the incident occurred and the actions needed to put in place to prevent it from happening again.
Some organizations may use pre-determined forms or checklists. However, use these documents with caution as they may be limiting in some cases. Always provide all of the information needed to help others understand the causes of the event, and why the recommendations are important.
What should be done if the investigation reveals human error?
A difficulty that has bothered many investigators is the idea that one does not want to lay the blame. However, when a thorough worksite investigation reveals that some person or persons among management, supervisor, and the workers were apparently at fault, then this fact should be pointed out. The intention here is to remedy the situation, not to discipline an individual.
Failing to point out human failings that contributed to an incident will not only downgrade the quality of the investigation, it will also allow future incidents to happen from similar causes because they have not been addressed.
However, never make recommendations about disciplining anyone who may be at fault. Any disciplinary steps should be done within the normal personnel procedures.
How should follow-up be done?
Management is responsible for acting on the recommendations in the investigation report. The health and safety committee or representative, if present, can monitor the progress of these actions.
Follow-up actions include:
- Respond to the recommendations in the report by explaining what can and cannot be done (and why or why not).
- Develop a timetable for corrective actions.
- Monitor that the scheduled actions have been completed.
- Check the condition of the injured worker(s).
- Educate and train other workers at risk.
- Re-orient worker(s) on their return to work.
(Read more: Close calls and Near-Miss Incidents.)
Download Infographic
Incident Investigations
More Photos
- What are the Best Practices for Managing Subcontractor Risk
- Photo of the day: 10 Essential Safety Tips for Driving in Hot Weather Conditions
- Photo of the day: best workplace safety tips
- Photo of the day: The Importance of Stop Work Authority in Maintaining Workplace Safety
- Photo of the day: Tomorrow’s Reward for Working Safely Today: Cultivating a Culture of Safety
- Photo of the day: Preventing slips and trips at work
- Photo of the day: Learn the DRSABCD action Plan
- Working with Electricity Electrical Accidents Guide for Electrical Workers
- Photo of the day: Hearing Protection Device Selection
- Photo of the day: If An Earthquake Shakes You-Infographic free
- Fire Safety Posters Free Download
- Photo of the day: First Aid for Electrical Burns-Infographic free
- Infographic: First Aid for Cuts and Scrapes free download
- Photo of The day: Work Safe with Lasers-Laser Safety free
- Photo of the day: Working Safely with chemicals and chemical Management
- Photo of the day: Safe work practices when using MEWPs ( updated)
- Photo of the day: Preventing Common Kitchen Hazards
- Photo of the day: Safe handling of Gas Cylinders and lecture bottles
- Photo of the day: Forklift Stability Triangle
- Photo of the day: Defective Tools Safe Work Practice
- Photo of the day: Lift With Your Legs Not With Your Back
- Photo of the day: First Aid for burns
- Photo of the day: The 7 Principles of HACCP
- Photo of the day: Working Safely with Suspended Loads
- Photo of the day: Heat Stroke First Aid and safety posters
- Photo of the day: Near-Miss Reporting and Posters
- Photo of the day: Ergonomic chair and office chair safety tips
- Photo of the day: Whole Body Vibration
- Photo of the day: Substation Safety Equipment
- Photo of the day: Bypassing Safety Controls Rules
- Photo of the day: Lightning Safety Tips
- Photo of the day: Overhead Power lines Clearance
- Photo of the day: Floor Marking
- Photo of the day: Types of Foot Protection
- Photo of the day: Types of Hand Protection
- Photo of the day: Lockout and Tagout Safety
- Photo of the day: Fall Protection Plans
- Photo of the day: Flood Safety Tips
- Photo of the day: Read All Labels Work safe
- Photo of the day: Run Project safely with Crane Hand Signals
- Photo of the day: Flagman and Traffic control
- Photo of the day: Managing Risks of Exposure to Solvents in the workplace
- Photo of the day: Scissor Lift Safety
- Photo of the day: HSE Bulletin Board
- Photo of the day: Arc-Fault Circuit Interrupters (AFCI)
- Photo of the day: Safe use of ladders and step ladders
- Photo of the day: Concrete Truck Driver Hand Signals
- Photo of the day: Extension Cord Safety Tips
- Photo of the day: Protect your Head
- Photo of the day: choosing the right Anchorage
- Photo of the day: Work-Related Asthma
- Photo of the day: Top FIVE Heavy Equipment Construction Site Safety Tips
- Photo of the day: sun safety in the workplace
- Photo of the day: Cannabis and Impairment in the Workplace
- Photo of the day: Position for safety and comfort-Safety Tips
- Photo of the day: Generator Safety
- Photo of the day: Controlling COVID-19 in the Workplace-Physical Barriers
- Photo of the day: Manual Material handling
- Photo of the day: Personal Protective Equipment last resort
- Photo of the day: WHMIS 2015 – Pictograms
- Photo of the day: Indoor Air Quality
- Photo of the day: Noise in the affected workplace
- Photo of the day: Fatigue at Work
- Photo of the day: Don’t be Driven to Distraction
- Photo of the day: working in heat and Humidex Rating
- How to use Plate Clamps Safely: Safety Moment#34
- Photo of the day: Sitting at work
- Photo of the day: 5 ways to reduce the risk of Slipping and Tripping
- Photo of the day: Preventing the spread of contagious illness
- Photo of the day: Incident Investigations
- Photo of the day: 10 Scaffold Safety Essentials
- Photo of the day: Effective Health and Safety Committees
- Photo of the day: New worker Orientation & Safety Orientation checklist
- Photo of the day: Workplace Inspection
- Photo of the day: musculoskeletal disorders
- Photo of the day: Emergency preparedness in the workplace
- Photo of the day: Mental health in the workplace
- Photo of the day: Trenching Safety Tips That Can Save a Life
- Photo of the day: Dangerous Goods Classes
- Photo of the day: Safety Equipment for Confined Spaces
- Photo of the day: Tips to reduce Heat stress in the workplace
- Photo of the day: hierarchy of controls
- Your steps to chemical safety
- H2S Gas and how to handle its Emergency
- Photo of the day: Importance of Mock drill and Fire Action Emergency Procedure
- Photo of the day: Choosing the Right Face Mask and the difference between a respirator and face mask
- Photo of the day: Confined space safety Precautions
- Breath Safely: The Proper Use of Respiratory Protection
- Photo of the day: Electric shock survival
- Photo of the day: Chemical Spill Emergency Response
- Photo of the day: Construction Site fire Safety