7.3 Clause 10: Incident Investigation, Nonconformity & Corrective Action

7.3 Clause 10: Incident Investigation, Nonconformity & Corrective Action

Lead Auditor Core Concept: Clause 10 represents the operational engine of continual improvement in ISO 45001. In high-performing organizations, incidents and nonconformities are treated not as administrative embarrassments to be concealed, but as critical diagnostic opportunities to identify and eliminate hidden systemic vulnerabilities. A Lead Auditor must critically investigate whether an organization merely patches symptoms through superficial worker retraining (correction) or digs deep to eliminate underlying systemic root causes through the hierarchy of controls (corrective action).

---

1. The Architecture of Clause 10: Improvement as an Active Engine

Under the Annex SL framework, Clause 10 establishes the "Act" phase of the Plan-Do-Check-Act (PDCA) cycle. It is structured into three interrelated clauses:

• Clause 10.1: General: The organization must determine opportunities for improvement and implement necessary actions to achieve intended outcomes.
• Clause 10.2: Incident, nonconformity and corrective action: The prescriptive core governing reactions, investigations, root cause elimination, and effectiveness reviews.
• Clause 10.3: Continual improvement: Enhancing OH&S performance, promoting a supportive safety culture, and fostering worker participation.

Normative Definitions under Clause 3

Lead auditors must master the technical distinctions between two core definitions:

• Incident (Clause 3.35): An occurrence arising out of, or in the course of, work that could or does result in injury and ill health. This encompasses injuries, occupational illnesses, fatalities, as well as incidents where no injury occurs (frequently termed "near-misses," "close calls," or "dangerous occurrences").
• Nonconformity (Clause 3.34): The non-fulfillment of a requirement. This includes non-compliance with ISO 45001 clauses, breaches of statutory safety regulations, or failures to follow internal standard operating procedures.

---

2. Clause 10.2: The Two-Stage Response Protocol

Clause 10.2 establishes an uncompromising, sequential two-stage response protocol whenever an incident or nonconformity occurs:

                    THE CLAUSE 10.2 TWO-STAGE RESPONSE PROTOCOL
┌─────────────────────────────────────────────────────────────────────────────┐
│ STAGE 1: Immediate Reaction (Clause 10.2a)                                  │
│ • React in a timely manner                                                  │
│ • Take immediate action to control and correct it (Containment)             │
│ • Deal with the consequences (First aid, medical care, spill isolation)     │
├─────────────────────────────────────────────────────────────────────────────┤
│ STAGE 2: Corrective Action & Root Cause Elimination (Clause 10.2b)          │
│ • Evaluate the need for action to eliminate causes with worker participation│
│ • Investigate the incident or review the nonconformity                      │
│ • Determine underlying root causes (5-Whys, Fishbone, Fault Tree)           │
│ • Determine if similar incidents/nonconformities exist elsewhere in the org │
└─────────────────────────────────────────────────────────────────────────────┘

Stage 1: Immediate Reaction (Containment)

Under Clause 10.2(a), the organization must react in a timely manner. Immediate actions focus on halting active danger and managing consequences: isolating electrical power, evacuating workers from toxic vapors, administering first aid, extinguishing fires, and stabilizing damaged structures. This is correction—it addresses the immediate symptom but does nothing to prevent recurrence.

Stage 2: Root Cause Elimination (Corrective Action)

Under Clause 10.2(b), the organization must evaluate the need for corrective action to eliminate the root causes so that the event does not recur or occur elsewhere. This requires structured investigation, causal analysis, and broad cross-organizational evaluation.

---

3. Root Cause Analysis (RCA) Methodologies & Worker Participation

Superficial investigations are a leading indicator of an immature safety culture. When an accident occurs, lazy investigations frequently conclude with "operator error" or "worker failed to follow procedure." Lead auditors recognize that human error is the starting point of an investigation, not the conclusion.

The Hierarchy of Causal Depth

Effective investigations deconstruct failures into three levels:

1. Direct Cause: The immediate physical mechanism or hazardous energy transfer that caused injury (e.g., oil slick on walkway, rotating unguarded shaft).
2. Contributing / Indirect Causes: Environmental and behavioral conditions that allowed the direct cause to exist (e.g., poor lighting, high production pressure, fatigue, lack of spill kits).
3. Systemic Root Causes: Failures within the management system that permitted the breakdown (e.g., deferred preventive maintenance budgets, lack of management of change when new lubricants were purchased, inadequate supervisor competency evaluations).

Mandatory Worker Participation (Clause 5.4e.12)

Under Clause 5.4(e)(12) and Clause 10.2(b), the organization is normatively required to involve non-managerial workers and worker representatives in incident investigations and nonconformity evaluations. Frontline workers understand shop-floor realities, workaround practices, and tool limitations that desk-bound managers overlook. Excluding workers from investigations violates the standard.

---

4. Pre-Implementation Risk Assessment & Hierarchy of Controls (Clause 10.2d)

A critical requirement frequently tested on Lead Auditor exams is found in Clause 10.2(d):

"The organization shall assess OH&S risks that relate to new or changed hazards, prior to taking action."

Preventing Unintended Consequences

Corrective actions cannot be implemented blindly. Modifying an industrial process to eliminate one hazard can easily introduce new, unforeseen hazards. For example, if an organization installs a heavy acoustic enclosure around a noisy compressor to eliminate noise exposure, the enclosure may create a dangerous confined space, trap heat, or impede emergency egress. Under Clause 10.2(d), the organization must conduct a formal risk assessment prior to installing the enclosure.

Furthermore, all corrective measures must be designed in strict alignment with:

• The Hierarchy of Controls (Clause 8.1.2): Prioritizing Elimination, Substitution, and Engineering Controls over Administrative Controls and PPE;
• Management of Change (Clause 8.1.3): Managing temporary or permanent modifications to equipment, materials, software, or staffing structures.

---

5. Evaluating Corrective Action Effectiveness & Systemic Revision

Under Clause 10.2(e), the organization must review the effectiveness of any corrective action taken. Corrective action is not complete when an work order is closed or a purchase order is paid.

The Lead Auditor Effectiveness Test

Lead auditors evaluate whether the organization has established a disciplined verification protocol:

• Timing: Did the organization wait an appropriate interval (e.g., 30, 60, or 90 days) to evaluate the action under full operational conditions?
• Criteria: Did the organization define quantifiable criteria to verify success (e.g., zero recurring oil leaks over three months, continuous sound level measurements below 80 dBA, 100% adherence to new interlock procedures)?
• Evidence: Is there documented proof that the root cause was eliminated?

Updating Management System Documentation (Clause 10.2f)

If an investigation reveals deficiencies in hazard identification or operational procedures, the organization must update its OH&S risk assessments (Clause 6.1.2) and revise standard operating procedures (Clause 8.1).

Retaining Documented Information (Clause 10.2g)

The organization must retain documented information as evidence of:

• The nature of the incidents or nonconformities and any subsequent actions taken;
• The results of any action and corrective action, including their verified effectiveness.

---

6. Clause 10.3: Continual Improvement and Safety Culture Enhancement

Continual improvement is not an abstract aspiration; it is an active normative obligation under Clause 10.3. The organization must continually improve the suitability, adequacy, and effectiveness of the OH&S management system by:

1. Enhancing OH&S Performance: Measurably reducing injury rates, eliminating hazards, and accelerating near-miss resolution times;
2. Promoting a Culture that Supports the OH&S Management System: Fostering psychological safety, eliminating fear of reprisal, and encouraging transparent incident reporting;
3. Promoting Worker Participation: Involving workers in continuous improvement workshops, kaizen events, and hazard reduction campaigns;
4. Communicating Continual Improvement Results: Sharing safety milestones and lessons learned with the entire workforce;
5. Retaining Documented Information: Preserving evidence of performance improvements.

---

7. Comparative Analysis: Correction vs. Corrective Action vs. Continual Improvement

---

8. Real-World Audit Scenario: The Repetitive Forklift Collision and Superficial Retraining

Audit Context: During a surveillance audit of a central logistics distribution warehouse employing 400 workers, the Lead Auditor reviews the incident register under Clause 10.2.

Audit Investigation:

1. Over the preceding twelve months, the warehouse recorded eleven collisions between powered industrial forklifts and pedestrian workers or structural racking.
2. The auditor examines the eleven formal incident investigation reports. In ten of the eleven cases, the investigation section titled "Root Cause" recorded the identical phrase: "Operator inattention and failure to maintain situational awareness."
3. The documented corrective action for each incident was: "Reminded driver to pay attention, issued verbal warning, and conducted 15-minute safe driving refresher."
4. The auditor inspects the warehouse floor and observes that pedestrian walkways cross blind warehouse intersections without convex mirrors, designated pedestrian crossing gates, or floor lane demarcations. High-speed forklifts share the same tight aisles with workers picking small parcels.
5. When interviewed, forklift operators stated that corporate delivery quotas had been increased by 25%, forcing drivers to exceed speed limits to avoid wage penalties.

Lead Auditor Evaluation: The Lead Auditor issues a Major Nonconformity citing ISO 45001:2018 Clause 10.2(b), (d), and (e). The organization exhibited a systemic failure in its corrective action process by:

• Failing to investigate true root causes, relying exclusively on blaming individual operators;
• Failing to apply the hierarchy of controls (e.g., physical pedestrian-forklift segregation, electronic speed governors, or physical barriers);
• Failing to assess the impact of increased production pressures on safety risks;
• Failing to evaluate the effectiveness of corrective actions, as evidenced by recurring collisions month after month.

---

9. Common Exam Traps and Candidate Errors

• Trap 1: Conflating Immediate Correction (Containment) with Corrective Action. Correcting an immediate nonconformity (e.g., cleaning an oil spill, replacing a blown fuse) is containment under Clause 10.2(a). Corrective action under Clause 10.2(b) requires identifying why the oil leaked or why the fuse blew, eliminating the underlying root cause to ensure it cannot happen again.
• Trap 2: Neglecting the Pre-Implementation Risk Assessment Mandate (10.2d). Candidates frequently overlook that Clause 10.2(d) explicitly requires assessing OH&S risks related to new or changed hazards prior to taking corrective action. Any exam option suggesting immediate physical implementation of unverified machine alterations is nonconforming.
• Trap 3: Dismissing Near-Misses as Trivial Non-Events. The ISO 45001 definition of an "incident" (Clause 3.35) includes occurrences where no injury occurred (near-misses). Organizations that investigate only blood-and-injury accidents while ignoring high-potential near-misses violate Clause 10.2.