14.1 Incident Investigation Process

14.1 Incident Investigation Process

Quick Answer: After any unwanted event, protect people first, then secure the scene, collect facts without blame theater, analyze immediate and root causes, issue SMART corrective and preventive actions, and verify follow-up until the system—not only the paperwork—has changed.

Incident investigation is a core supervisory skill in the Occupational Health, Incident Investigation, and Nigerian Regulations domain of ISPON HSE Level 3. Clients on Nigerian construction, manufacturing, logistics, and oil-and-gas sites expect supervisors to treat every injury, near miss, asset damage, and environmental release as a learning opportunity—not a paperwork inconvenience. ISO 45001 Clause 10 and HSG65’s “Act” stage both require reacting to incidents and nonconformities; your job is to make that reaction factual, timely, and useful.

---

What Counts as an “Incident”

Use clear local definitions so crews report consistently:

Supervisors should encourage reporting of near misses. Heinrich’s classic ratio (about 1 major : 29 minor : 300 near misses) is taught on Level 3 courses to show that serious outcomes sit on a pile of weaker signals. Punishing reporters destroys those signals.

---

The Investigation Sequence Supervisors Must Own

1. Immediate response and secure the scene

People first: stop the work that is still hazardous, deliver first aid or activate medevac, isolate energy, and prevent secondary harm (fire spread, further collapse, chemical exposure). Once life safety is stable:

• Barricade the area and control access
• Preserve positions of tools, scaffolds, vehicles, valves, and debris
• Stop unnecessary cleanup until photographs and sketches are complete (unless cleanup is required to prevent further harm or environmental escalation)
• Notify per site matrix: HSE, area authority, client representative, and—when legally required—regulators or emergency services

Scene security is not optional. A Port Harcourt fabrication yard that “tidies up” before photos are taken often loses the only evidence of missing toe-boards, an open drain cover, or an unsigned isolation.

2. Gather facts (not opinions dressed as facts)

Collect what can be verified:

• Time, location, task, permit numbers, and weather/lighting
• People involved and their roles (issuer, holder, AGT, banksman, fire watch)
• Equipment IDs, last inspection/maintenance status, and materials in use
• Documents: JHA/JSA, method statement, toolbox talk attendance, PTW, gas-test logs, journey plans
• Physical evidence: photos from multiple angles, measurements, CCTV if available, damaged PPE
• Witness statements taken separately, promptly, and respectfully—ask what they saw and did, not who they want blamed

Separate immediate causes (unsafe act/condition that triggered the event—oil on the floor, missing guard, standing under a suspended load) from early hypotheses about root causes (why the oil was there, why the guard was removed, why the exclusion zone failed). Do not skip fact-gathering to jump to a preferred narrative.

3. Analyze causes

Use structured tools (covered in depth in 14.2)—commonly 5 Whys and Ishikawa (Fishbone)—to move from symptoms to system failures: competence gaps, inadequate procedures, conflicting production pressure, poor maintenance planning, weak supervision, or design defects. Ask whether controls in the hierarchy (elimination through PPE) were missing, bypassed, or never verified.

4. Recommend corrective and preventive actions

Actions must be SMART (Specific, Measurable, Achievable, Relevant, Time-bound) and matched to cause level:

• Fixing only the immediate cause (wipe the oil) without addressing the root (chronic leak + no drip trays + no housekeeping standard) invites recurrence
• Prefer higher-order controls where feasible: redesign, guarding, interlocks, better sequencing—not only “retrain and remind”
• Assign a named owner, due date, and verification method for each action

5. Report, communicate, and follow up

Complete the site investigation form and any client/regulatory notifications within required timelines. Brief affected crews through toolbox talks or safety alerts so lessons leave the investigation room. Follow-up means checking that actions were implemented and effective—re-inspect the location, review the updated procedure, confirm training attendance, and close the action only when evidence supports closure. Overdue actions are themselves a leading indicator of weak safety management.

---

Investigation Depth by Severity

Match effort to risk potential, not only to actual outcome. A dropped object that missed a worker by centimetres may deserve HiPo treatment even when the injury count is zero.

---

Blame Culture Versus Just Culture

Level 3 candidates must distinguish accountability from scapegoating. Deliberate rule-breaking, intoxication, or falsifying permits requires consequence management. Honest mistakes, unclear procedures, and conflicting targets require system fixes. If every investigation ends with “worker carelessness,” your site will hide near misses and recycle the same incidents.

---

Nigerian Site Realities

On multi-employer sites (EPC yards, well locations, factory turnarounds), clarify who investigates in the bridging document: client, principal contractor, or specialist. Preserve contractor and company evidence equally. Community or security-sensitive events may need careful communication via the Community Liaison Officer without contaminating the factual investigation.

---

Exam Focus Checklist

• Memorize the flow: secure scene → gather facts → analyze → recommend → follow-up
• Define immediate vs root cause with a concrete example
• Know that near-miss reporting and HiPo thinking prevent severe outcomes
• Treat action verification as part of investigation close-out, not an afterthought

A strong Level 3 supervisor leaves every investigation with three outputs: a truthful event description, system-level causes, and tracked actions that make recurrence less likely.