5 Common Incident Investigation Mistakes

Every year, organizations spend thousands of hours investigating workplace incidents. Forms are filled, interviews conducted, reports written. Yet the same types of incidents keep happening.

Why? Because most investigations make the same fundamental mistakes.

Here are the five most common—and how to avoid them.

Mistake #1: Stopping at "Human Error"

Except it's not closed. Nothing has been learned. And the same error will happen again—probably soon—because the conditions that made the error possible haven't changed.

The reality: Human error is never a root cause. It's a starting point for investigation.

When someone makes a mistake, ask:

• Why did the action make sense to them at the time?
• What information did they have (or lack)?
• What pressures were they under?
• Why didn't the system catch or prevent the error?

Example transformation:

• ❌ "Operator failed to lock out equipment before maintenance"
• ✅ "Production pressure led supervisor to approve shortcut. Lockout procedure was 45 minutes long, designed for annual shutdowns, not quick repairs. No alternative procedure existed for minor maintenance."

Mistake #2: Confusing "What" with "Why"

You end up with a 20-page report that tells you the worker was standing in the wrong place at the wrong time—but not why they were there, or why being there was dangerous.

The reality: "What" questions describe the incident. "Why" questions explain it.

The purpose of investigation isn't to create a historical record. It's to understand causation so you can prevent recurrence.

Test your investigation with the "Five Whys":

1. Why did this happen?
2. Why did that happen?
3. Why did that happen?
4. Why did that happen?
5. Why did that happen?

If you can't answer at least five levels deep, you haven't finished.

Mistake #3: Treating All Incidents the Same

The reality: Investigation effort should match incident significance—but significance isn't just about outcomes.

A near-miss with high potential severity deserves more investigation than a minor injury with no systemic implications. The goal is learning, not paperwork.

• Full ICAM investigation: Serious outcomes OR high-potential incidents
• Focused investigation: Moderate potential, clear contributing factors
• Quick review: Low potential, isolated occurrence, no systemic factors

But here's the key: even quick reviews should identify whether deeper investigation is needed. A pattern of "minor" incidents often signals a major incident waiting to happen.

Mistake #4: Writing Recommendations No One Will Follow

These aren't recommendations. They're wishes.

The reality: Vague recommendations don't get implemented. Even when they do, they don't change anything.

"Retrain all workers" feels like action, but it usually means showing people the same ineffective training they've already forgotten.

• Specific: Exactly what will change?
• Measurable: How will you verify it worked?
• Actionable: Who will do it, and by when?
• Relevant: Does this address a root cause?
• Timely: Can it be implemented before another incident occurs?

Example transformation:

• ❌ "Improve lockout/tagout compliance"
• ✅ "By March 1, maintenance supervisor will develop 5-minute lockout procedure for minor equipment repairs, pilot with night shift, and revise based on feedback. Track compliance through supervisor observation during week 2."

Mistake #5: Investigating in Isolation

The reality: Most incidents aren't unique. They're manifestations of systemic issues that affect multiple areas.

If you're having lockout/tagout incidents in maintenance, you probably have procedure issues everywhere. If time pressure contributed to one incident, it's contributing to risk across your operation.

During investigation:

• Review past similar incidents
• Look for recurring contributing factors
• Ask whether this incident reveals systemic issues

After investigation:

• Share findings beyond the affected area
• Track contributing factors across incidents
• Look for organizational factors that appear repeatedly

Mistake #6: Underestimating the Cost of a Poor Investigation

The reality: The cost of a superficial investigation is deferred, not avoided. When the same organizational factors recur in a more serious event, the full cost — legal liability, compensation claims, reputational damage, operational downtime, and human suffering — dwarfs what a deeper initial investigation would have required.

Research consistently shows that the ratio of direct to indirect costs for serious workplace incidents runs between 1:4 and 1:10. For every dollar in direct costs (medical, compensation), there are four to ten dollars in indirect costs (downtime, investigation, retraining, legal fees, morale impact, recruitment).

A thorough ICAM investigation on a high-potential near miss typically costs 2–5 days of investigator time. Preventing a single serious injury from a recurring systemic issue can save hundreds of thousands of dollars and — more importantly — a life.

A near miss with the potential to kill deserves the same investigative rigour as an actual fatality. Don't let the fact that "no one was hurt this time" dictate how much you're willing to spend on understanding why.

What Good Investigations Actually Look Like

Organizations with strong investigation cultures share common characteristics that distinguish their approach from compliance-driven programs:

• Investigation teams include operations: Not just safety — the people who do the work understand what the work actually looks like. Their perspective is essential.
• Workers are partners, not suspects: The first conversation with an injured worker or witness is about understanding, not about establishing facts for a report.
• Findings drive system changes: Most corrective actions target procedures, equipment, training systems, or supervision — not individual behaviour.
• Learning is tracked and shared: A recommendation made and forgotten is no recommendation at all. Effective programs verify implementation and measure whether controls work.
• Investigation quality is reviewed: Senior safety professionals critique reports before finalisation. Shallow causation chains and administrative corrective actions are sent back for deeper analysis.

The Underlying Problem

All five mistakes stem from the same root cause: treating investigation as compliance activity rather than learning opportunity.

When investigation is about filling forms, you get superficial analysis, standardized treatment, checkbox recommendations, and isolated findings.

When investigation is about learning, you get deep understanding of why, proportionate effort for proportionate learning, actionable changes, and organizational learning that prevents recurrence.

How to Transform Your Investigations

• Change the question. Instead of "What went wrong?" ask "What can we learn?"
• Invest in capability. Train investigators in methodology, interview techniques, and analysis.
• Create psychological safety. People won't share honest information if they fear blame.
• Use structured methodology. Frameworks like ICAM provide rigor and consistency.
• Follow through. Track recommendations, verify implementation, measure effectiveness.
• Share learning. Investigation findings should reach everyone who can benefit.

The goal isn't perfect investigations. It's genuine organizational learning that makes your workplace safer over time.