11.3 Incident Investigation Methodologies (GAR 9, 5 Whys, Root Cause Analysis) and CAPA
Key Takeaways
- General Administrative Regulation 9(2) requires every incident recordable under GAR 9(1) to be investigated within 7 days from the date of the incident — by the employer, a person appointed by the employer, a health and safety representative or a member of a health and safety committee — and finalised as soon as is reasonably practicable.
- Root Cause Analysis (RCA) requires moving beyond superficial immediate causes (unsafe acts and unsafe conditions) to uncover systemic, managerial, and organizational failures.
- The 5 Whys technique provides an iterative questioning framework drilling past symptoms to management breakdowns, while the Fishbone (Ishikawa) diagram systematically categorizes causal factors across the 6Ms (Man, Machine, Material, Method, Measurement, Milieu).
- Corrective and Preventive Actions (CAPA) must satisfy SMART criteria, prioritize elimination and engineering controls over administrative rules and PPE, and assign designated supervisory owners with strict completion dates.
- Statutory close-out mandates recording findings on GAR Annexure 1, formally tabling the investigation report before the Section 19/20 Health and Safety Committee, and retaining all documentation for a minimum of three years.
11.3 Incident Investigation Methodologies (GAR 9, 5 Whys, Root Cause Analysis) and CAPA
[!NOTE] SACPCMP Blueprint Context: In the SACPCMP CHSO professional examination, candidate competency in incident investigation methodologies is evaluated at an advanced analytical level. Candidates must demonstrate deep knowledge of General Administrative Regulation 9 (GAR 9), the statutory role and rights of the Health and Safety Representative under Section 18(1)(f), the scientific distinction between immediate causes and systemic root causes, the operational execution of the 5 Whys and Fishbone (Ishikawa) methodologies, the formulation of enforceable SMART Corrective and Preventive Actions (CAPA), and the mandatory three-year statutory record retention mandate.
The ultimate statutory objective of an occupational health and safety investigation in South Africa is not the apportioning of individual blame or the compilation of disciplinary dossiers. The legal mandate is the identification of underlying systemic, engineering, and managerial failures so that corrective and preventive controls can be engineered to permanently eliminate recurrence.
1. Statutory Investigation Mandate Under GAR 9
While Section 24 of the OHS Act establishes the obligation to report incidents, General Administrative Regulation 9 (GAR 9) establishes the legal framework governing how an employer must investigate them.
Core Legal Requirements of GAR 9
- The 7-Day Commencement Mandate (GAR 9(1) & (2)):
- The employer or user of machinery must investigate every incident referred to in Section 24, as well as any other incident that resulted in an employee being injured to such a degree that they were unable to perform normal work duties for a full shift.
- Under GAR 9(2) the incident must be investigated within 7 days from the date of the incident and finalised as soon as is reasonably practicable, or within the contracted period in the case of contracted workers.
- Mandatory Composition of the Investigation Team (GAR 9(2)):
- The investigation must be conducted by the employer, a person designated by the employer (such as the registered CHSO or a competent safety manager), and must include the Health and Safety Representative appointed under Section 17 for the designated workplace or work section.
- Where no H&S Rep is available, an employee representative must participate.
- Statutory Status of the H&S Representative:
- Under Section 18(1)(f) of the OHS Act, the Health and Safety Representative has the explicit legal right to inspect the incident scene, attend the formal investigation, examine witness statements, and review the draft report.
- Excluding the H&S Rep from the investigation is a direct statutory violation that invalidates the administrative fairness of the report.
+---------------------------------------------------------------------------------------------------+
| GAR 9 Statutory Investigation Team Structure |
+---------------------------------------------------------------------------------------------------+
| Principal Contractor / Employer Appointee (Section 16(2) / Construction Manager CR 8(1)) |
| │ |
| ┌────────────────────────────────┴────────────────────────────────┐ |
| ▼ ▼ |
| Lead Competent Investigator (CHSO CR 8(5)) Section 17 H&S Representative |
| • Technical investigation methodologies • Statutory employee advocate |
| • Evidence analysis & RCA facilitation • Worker perspective & validation|
| • Compilation of GAR Annexure 1 • Co-signs final findings |
| │ │ |
| └────────────────────────────────┬────────────────────────────────┘ |
| ▼ |
| Technical Specialist / Professional Engineer |
| (CR 12 Designer, LMI Crane Inspector, Geotechnical Eng) |
+---------------------------------------------------------------------------------------------------+
2. Immediate Causes vs. Underlying and Root Causes
A critical failure in amateur investigations is stopping at the immediate symptom (the human error or broken component) without drilling into the systemic organizational root causes that permitted the hazard to exist.
The Causation Hierarchy (The Swiss Cheese Model)
Root cause analysis is grounded in modern accident causation science (such as Reason's Swiss Cheese Model and the Bird Loss Causation Model):
+---------------------------------------------------------------------------------------------------+
| The Incident Causation Chain |
+---------------------------------------------------------------------------------------------------+
| ORGANIZATIONAL / ROOT CAUSES (Latent Deficiencies in Safety Management System) |
| • Flawed procurement policy (cheap uncertified slings) |
| • Inadequate training & competency verification systems |
| • Severe schedule pressure and budget cuts imposed by executive leadership |
| │ |
| ▼ |
| UNDERLYING / BASIC CAUSES (Job & Personal Factors) |
| • Artisan fatigue from 16-hour shifts; lack of task supervision |
| • Inadequate daily pre-shift inspection enforcement |
| • Absence of a task-specific Safe Work Procedure (SWP) |
| │ |
| ▼ |
| IMMEDIATE CAUSES (Active Failures / Direct Symptoms) |
| • UNSAFE ACTS: Artisan operates crane without outrigger pads; fails to connect lanyard. |
| • UNSAFE CONDITIONS: Unguarded floor opening; waterlogged, unshored trench sidewall. |
| │ |
| ▼ |
| THE LOSS INCIDENT: Structural collapse, fatal fall from height, or electric arc flash |
+---------------------------------------------------------------------------------------------------+
Immediate Causes: Unsafe Acts and Unsafe Conditions
- Substandard Acts (Unsafe Acts): Behaviors that depart from an accepted safe procedure—e.g., bypassing a machine safety guard, operating mobile plant at excessive speed, failing to wear a safety harness, smoking near a flammable store, or using a defective grinding disc.
- Substandard Conditions (Unsafe Conditions): Physical hazards in the workplace environment—e.g., missing scaffold handrails, exposed electrical wiring, an un-shored 2-meter trench in loose sand, or pooling hydraulic fluid on a walkway.
[!CAUTION] The "Human Error" Cop-Out Trap: In the SACPCMP examination, any investigation finding that concludes the incident was caused solely by "worker carelessness", "operator negligence", or "failure to pay attention" is technically flawed. Unsafe acts are almost always the consequence of deeper systemic failures in supervision, training, ergonomic design, or organizational culture.
3. Structured Root Cause Analysis Methodologies
South African construction health and safety officers must be skilled in deploying three primary RCA methodologies:
Methodology 1: The 5 Whys Technique
The 5 Whys is an iterative interrogation technique that drills past superficial symptoms to uncover organizational breakdowns by repeatedly asking "Why?" (typically five times):
+---------------------------------------------------------------------------------------------------+
| 5 Whys Construction Incident Investigation Case |
+---------------------------------------------------------------------------------------------------+
| PROBLEM STATEMENT: A concrete finisher fell 3.5m through an unguarded opening, breaking his pelvis. |
| |
| Why 1: Why did the artisan fall through the opening? |
| Answer: Because he stepped onto a piece of 9mm plywood covering the penetration that gave way. |
| |
| Why 2: Why did the plywood give way under his weight? |
| Answer: Because thin 9mm non-structural shutterply was used, and it was not fixed or secured. |
| |
| Why 3: Why was unsecured 9mm ply used instead of an engineered cover or guardrails? |
| Answer: Because plumbing subcontractors cut the hole and placed scrap timber over it as a quick fix.|
| |
| Why 4: Why did the plumbing subcontractors leave an uncertified, unmarked cover? |
| Answer: Because no Permit-to-Penetrate or hole-management procedure was enforced on the project. |
| |
| Why 5 (ROOT CAUSE): Why was there no penetration permit procedure or supervisory oversight? |
| Answer: Because the principal contractor's Health and Safety Plan failed to identify penetration |
| hazards, and the Section 16(2) manager never audited subcontractor temporary works. |
+---------------------------------------------------------------------------------------------------+
Methodology 2: The Fishbone (Ishikawa) Diagram (The 6M Framework)
The Fishbone Diagram organizes potential causes into a structured graphic resembling a fish skeleton, evaluating six distinct operational categories adapted for the construction sector:
- Man (Personnel / Human Factors): Competency, training accreditation (SAQA), physical fitness (Annexure 3), mental fatigue, stress, supervisory ratios, and communication barriers;
- Machine (Plant & Equipment): Mechanical integrity, maintenance history, statutory inspection records, safety limit switches, outrigger load ratings, and equipment suitability;
- Material: Quality of construction supplies, defective rigging slings, counterfeit scaffold couplers, non-specification timber, or missing Safety Data Sheets (SDS);
- Method (Work Procedures): Adequacy of baseline risk assessments (HIRA), Safe Work Procedures (SWP), Safe Work Method Statements (SWMS), and Daily Safe Task Instructions (DSTI);
- Measurement: Adequacy of pre-use inspection checklists, calibration of multi-gas detectors, surveyor levels, and torque wrench verification on structural bolts;
- Milieu (Environment / Site Conditions): Wind velocity, torrential rain, poor illumination, extreme heat, noise levels above 85 dBA, congested access ways, and unstable ground conditions.
Methodology 3: Fault Tree Analysis (FTA) & Timeline Mapping
- Timeline Mapping: Chronologically plotting every event leading up to the incident (e.g., T - 2 hours: toolbox talk held; T - 30 min: rain starts; T - 5 min: spotter leaves station; T = 0: incident occurs);
- Fault Tree Analysis (FTA): A top-down deductive logic tree where an undesired event (e.g., "Excavator Rollover") is placed at the top, and contributing causal paths are mapped downwards using boolean logic gates (AND Gates where all conditions must occur simultaneously, and OR Gates where any single condition can trigger the event).
4. Formulating SMART Corrective and Preventive Actions (CAPA)
An investigation report is worthless unless it produces actionable, permanent remedial measures. The CHSO must formulate Corrective Actions (eliminating the immediate hazard) and Preventive Actions (re-engineering the management system to prevent recurrence across the organization).
The SMART CAPA Criteria
Every CAPA item must strictly satisfy the five SMART principles:
- S - Specific: State exactly what physical, technical, or procedural action must be executed (e.g., "Install certified edge protection consisting of 1000mm top rail, 500mm mid rail, and 150mm toe board around Block C third-floor void");
- M - Measurable: Defined verification criteria (e.g., "Signed off by CR 16 competent scaffold inspector in the site register");
- A - Achievable: Technically feasible, operationally realistic, and financially budgeted;
- R - Relevant: Directly addresses an identified root cause, not merely an unrelated housekeeping issue;
- T - Time-Bound: A concrete, non-negotiable completion date (e.g., "Completed by 17:00 on 12 September 2026"—avoid vague terms like "ongoing" or "ASAP").
+---------------------------------------------------------------------------------------------------+
| SMART CAPA Action Tracking Architecture |
+---------------------------------------------------------------------------------------------------+
| Root Cause Identified ───> Hierarchy of Controls Evaluation (Eliminate > Engineer > Admin > PPE) |
| │ |
| ▼ |
| Formulate SMART Action───> Assign Direct Named Appointee (e.g., J. Khumalo - CR 8(7) Supervisor) |
| │ |
| ▼ |
| Establish Deadline ───> Specific Date & Time (e.g., 14 Sept 2026 at 12:00) |
| │ |
| ▼ |
| Verification Gateway ───> Physical Close-out Audit by CHSO & Sign-off in Safety File |
+---------------------------------------------------------------------------------------------------+
Applying the Hierarchy of Controls to CAPA
CAPA recommendations must follow the statutory Hierarchy of Controls under Section 8(2)(b) and Construction Regulation 9:
- Elimination: Redesigning the work sequence to eliminate the hazard (e.g., prefabricating steel cages at ground level instead of tying rebar at height);
- Substitution: Replacing hazardous solvent-based paints with water-based non-toxic alternatives;
- Engineering Controls: Installing physical barriers, collective fall arrest netting, interlocked safety guards, or hydraulic trench boxes;
- Administrative Controls: Re-drafting SWPs, implementing formal Permit-to-Work systems, and retraining artisans;
- Personal Protective Equipment (PPE): The last and weakest line of defense (e.g., issuing full-body harnesses or respirators).
[!IMPORTANT] The "Retrain the Worker" Trap: In professional safety practice, recommending only "worker was given a safety talk and told to be more careful" is unacceptable. If an engineering or supervisory failure existed, administrative retraining without physical or systemic safeguards guarantees the incident will reoccur.
5. Statutory Close-Out, Committee Tabling, and Record Retention
Completing the investigation report does not conclude the statutory process. South African legislation mandates specific governance and record-keeping procedures.
Tabling Before the Health and Safety Committee (Section 20 & GAR 9(2))
- Under Section 20(1) of the OHS Act read with GAR 9(2), the completed incident investigation report must be formally tabled and examined at the very next meeting of the Health and Safety Committee;
- The committee (comprising employer representatives and elected H&S Reps) must review the identified root causes, evaluate the effectiveness of the proposed CAPA, and track action items to completion;
- The findings and committee recommendations must be recorded in the formal Health and Safety Committee Minutes.
Statutory Record Retention for at least 3 Years (GAR 9(3))
Under General Administrative Regulation 9(3), the employer must preserve and retain:
- The formal Annexure 1 investigation report;
- All original witness statements, photographs, sketches, and forensic reports;
- All impounded registers, DSTI records, and equipment inspection sheets;
- For a period of at least three (3) years, kept at the workplace and open for inspection by an inspector (GAR 9(1)).
These records must be maintained in the project health and safety archive and made immediately available for inspection upon demand by any inspector of the Department of Employment and Labour under Section 29.
6. RCA Methodologies Comparison Matrix
| RCA Methodology | Primary Operational Focus | Best Suited For | Key Strength | Notable Limitation |
|---|---|---|---|---|
| 5 Whys Technique | Linear, iterative drilling from symptom to management failure. | Single-path failures, task-level breakdowns, procedural slips. | Rapid, intuitive, easily understood by site supervisory staff. | Prone to confirmation bias; struggles with complex multi-causal disasters. |
| Fishbone (Ishikawa / 6M) | Categorical brainstorming across Man, Machine, Material, Method, Measurement, Milieu. | Complex structural failures, multi-contractor site accidents. | Comprehensive; prevents premature focus on human error alone. | Does not illustrate chronological timelines or causal interactions. |
| Fault Tree Analysis (FTA) | Top-down deductive logic mapping using boolean AND/OR gates. | High-consequence engineering failures (crane tips, boiler bursts). | Highly rigorous, quantitative, reveals critical single-point failure paths. | Requires specialized engineering training and substantial time to construct. |
| Sequence of Events Mapping | Chronological timeline charting of actions and environmental shifts. | Vehicle collisions, dynamic lifting operations, structural collapses. | Establishes precise chronological sequence and temporal relationships. | Focuses on when events happened rather than why systemic barriers failed. |
7. Realistic South African Construction Case Scenarios
Scenario A: MEWP Overturn on an Uneven Haul Road in Richards Bay
On a port expansion project in Richards Bay, a Mobile Elevating Work Platform (MEWP / cherry picker) traveling with its boom extended 8 meters overturns while traversing a compacted sand haul road, throwing two electrical artisans onto a riprap embankment, resulting in severe spinal trauma and multiple fractures.
- Immediate Causes: The operator drove the MEWP across an uneven 8-degree slope with the basket elevated (Unsafe Act); the ground was soft and lacked firm compaction (Unsafe Condition).
- Underlying Causes: The operator was not issued a task-specific SWP; the site supervisor pressured the crew to finish lighting installations before nightfall; the MEWP's automatic tilt sensor alarm had been bypassed with duct tape.
- Root Causes (RCA Findings):
- The principal contractor had no MEWP management procedure or ground bearing capacity verification system under Construction Regulation 22;
- The plant hire procurement contract did not require 6-monthly certified maintenance logs;
- The Section 16(2) appointee failed to audit high-risk mobile plant permits.
- SMART CAPA Implemented: Procurement policy updated to ban non-certified plant; tilt sensor bypass interlocks audited weekly; mandatory MEWP pre-travel path inspection permits instituted under a named CR 8(7) supervisor.
Scenario B: Trench Collapse in Midrand (RCA Uncovers Commercial Production Pressure)
A 2.5-meter-deep stormwater trench collapses onto two artisans laying concrete pipes in Midrand, Gauteng. The artisans survive with crush injuries. The earthworks subcontractor claims the collapse was an "unforeseeable act of God caused by sudden underground sand pockets."
- Investigation Findings: The CHSO leads a GAR 9 investigation with the Section 17 H&S Rep. Utilizing the 5 Whys, the CHSO reveals:
- Why were the workers in an un-shored 2.5m trench? Because the trench box was removed.
- Why was the trench box removed? Because the contractor only rented one trench box and moved it to another section.
- Why was it moved before pipelaying finished? Because the project manager issued a written threat of R100,000-per-day delay penalties if pipelaying fell behind schedule.
- Root Cause: Commercial schedule pressures directly overrode statutory compliance under Construction Regulation 13(2)(a), with site management actively colluding to bypass shoring requirements.
- Outcome: The Section 16(2) manager was disciplined; the company instituted an unyielding Stop-Work Authority policy; all trenches > 1.5m were subjected to daily physical inspection permits signed by a newly appointed Pr.Eng geotechnical supervisor.
8. Common SACPCMP Exam Pitfalls & Traps
[!CAUTION] Avoid These Critical Exam Errors:
- Excluding the H&S Representative from the Investigation: GAR 9(2) explicitly requires the participation of the Health and Safety Representative. An investigation conducted exclusively by management or external consultants without employee representation is legally non-compliant.
- Confusing Immediate Causes with Root Causes: In exam questions asking for the "root cause," options such as "worker failed to wear safety goggles" or "sling broke" are immediate causes (symptoms). The true root cause always lies in procurement, training, supervision, or safety management systems.
- Believing the Investigation Can Wait 30 Days: Under GAR 9(2), the investigation must take place within 7 days of the incident.
- Assuming CAPA Can Be Assigned to "All Staff" or "Ongoing": Exam markers penalize CAPA proposals that do not designate a specific, single, accountable person (e.g., CR 8(7) supervisor) and a definite calendar completion date.
- Discarding Records After 12 Months: GAR 9(1) requires the Annexure 1 record to be kept at the workplace for a period of at least three (3) years, open for inspection by an inspector. GAR 9(3) is the duty to enter the investigation findings in Annexure 1; GAR 9(4) is the duty to have the record examined by the health and safety committee at its next meeting.
Under General Administrative Regulation 9(2) of the OHS Act, what is the statutory deadline for commencing an incident investigation, and which party has an explicit legal right to participate in the proceedings?
An investigation into a serious fall from an elevated scaffold reveals that a scaffold coupler failed because an uncertified scaffold erector used an incorrect pipe clamp. Drilling deeper using the 5 Whys and Fishbone methodologies reveals that the contractor had no scaffold competency verification system, bypassed procurement checks to buy substandard imported fittings, and forced crews to work 16-hour shifts without supervision. How should these findings be classified in the final GAR 9 report?
Following the completion of a formal statutory incident investigation under GAR 9, which statutory governance procedures must the employer and CHSO execute regarding committee tabling and record retention?