Leadership & Culture
Incident Investigation and Root Cause Analysis
Learning, not blame. Prevention, not punishment. Immediate response and evidence, the 5 Whys, Bow-Tie and Swiss Cheese models, SMART CAPAs with named owners and deadlines, and sharing the learning across the site.
Learning Objectives
- Understand that the purpose of investigation is learning and prevention — every incident is a system failure.
- Apply the immediate response — scene preservation, evidence, witnesses, and UAE legal notifications inside the required timeframes.
- Use the 5 Whys, Bow-Tie and Swiss Cheese models to identify the system failures behind an incident.
- Write SMART CAPAs with a named owner, deadline and verification step.
- Close the loop — share the learning with the team and verify every CAPA is implemented before work resumes.
Training Video
ProPreview
9-minute video
Unlock this training video
The first 3 modules are free. Upgrade to Pro to watch every module, save progress, and issue certificates.
Upgrade to ProModule Content
1. Why We Investigate — Learning, Not Blame
The purpose of an incident investigation is to understand WHAT happened and WHY — not to find someone to blame. An investigation that identifies a person to blame has failed. An investigation that identifies a system to fix has succeeded. Every incident is a system failure — and a learning opportunity. Under UAE Federal Decree-Law No. 33 of 2021 and ADOSH-SF, employers are legally required to investigate all recordable incidents and near-misses, document findings, implement corrective actions and report to MOHRE / ADOSH-SF (formerly OSHAD) within the required timeframes. Failure to investigate is a criminal offence.
2. The Incident Pyramid — Investigate Near-Misses First
For every fatality there are ~3 lost-time injuries, ~10 recordable incidents, ~29 first-aid cases and 300+ near-misses. Organisations that investigate near-misses prevent fatalities. Organisations that only investigate fatalities are always too late. Treat every near-miss as a fatality that almost happened — the near-miss report is your most valuable safety tool.
3. Immediate Response — The First 24 Hours
Secure the scene, care for the injured, preserve evidence (photograph in place before anything is moved, isolate equipment, keep tools and PPE), interview witnesses one at a time and record their words. UAE legal notifications: police within 24 HOURS of a fatality, MOHRE within 48 hours of a fatality or serious injury, formal investigation report within 15 days. Notify the client and internal management immediately. The Substitution Test: 'Would a reasonably competent colleague in the same situation have made the same error?' If yes — it is a SYSTEM failure, not individual failure.
4. Root Cause Analysis — 5 Whys, Bow-Tie, Swiss Cheese
5 WHYS — keep asking WHY until you reach a system cause, not a person cause. 'Worker didn't wear harness' is a symptom; 'no anchor point designed for that scaffold section' is a root cause. BOW-TIE — Threats → Prevention Barriers → Top Event → Mitigation Barriers → Consequences. Every failed barrier is a CAPA. SWISS CHEESE (James Reason) — incidents happen when the holes in successive barriers align. For each slice ask 'why does this hole exist?' Fix ALL the holes, not just the one the incident passed through last.
5. SMART CAPAs — A CAPA Without an Owner and a Deadline Is a Wish
Every CAPA must be SPECIFIC (exactly what will be done), MEASURABLE (how you know it is done), ASSIGNED (named person responsible), REALISTIC (achievable with available resources) and TIME-BOUND (deadline date). WRONG: 'Workers to be more careful when working at height.' RIGHT: 'HSE Manager to conduct harness fitting training for all 47 workers on Site A by 15 July 2026.' Corrective Actions fix the immediate cause of THIS incident; Preventive Actions change the system, process or behaviour so the same event cannot recur.
6. Closing the Loop — Verify and Share
Before work resumes: physically verify every corrective action is implemented, re-brief the team, and update the MSRA to reflect the new controls. Share the findings with the team — without naming individuals — so the whole organisation learns. File the investigation report and track CAPA closure to date. Every incident that is investigated properly prevents the next one. Every near-miss that is investigated prevents a fatality. Every CAPA that is closed properly makes the system stronger — and every worker safer.
Knowledge Assessment
1. What is the PRIMARY purpose of an incident investigation?
2. An investigation concludes with 'root cause: worker failed to follow procedure.' What is wrong with this conclusion?
3. What is the Substitution Test in incident investigation?
4. Under UAE regulations, within what timeframe must a workplace fatality be reported to the police?
5. In the Incident Pyramid, approximately how many near-misses occur for every fatality?
6. What does the Swiss Cheese Model explain about how incidents occur?
7. Which of the following is a CORRECT CAPA (Corrective and Preventive Action)?
8. What must happen BEFORE work resumes after an incident investigation?
9. In the Bow-Tie Model, what do 'Prevention Barriers' represent?
10. What is the MOST IMPORTANT action after completing an investigation?
Certificate
Pass the quiz (8 / 10) to unlock your certificate.
Acknowledgement
By signing below, you confirm you have watched the training video, understood the material, and will apply these controls on site.