Icologiq Knowledge · Process
Incident Investigation
A structured process for establishing what happened in an incident, why it happened, which controls failed or were missing, and what actions can reduce the risk of recurrence.
Also known as:
accident investigation, incident investigation process, safety incident investigation, workplace incident investigation
At a glance
Type
Process
Topic
CAPA & Incidents
Applies to
Cross-industry
Current version
HSG245
Status
HSE guidance
Last reviewed
September 30, 2026
Definition
Incident investigation is a structured process for establishing what happened, how it happened and why an incident, accident or near miss occurred. It starts with evidence and the event sequence, then examines immediate causes, underlying causes and the risk controls or barriers that should have prevented or limited the event. The aim is not to allocate blame, but to understand the conditions and system weaknesses that made the event possible and identify actions that reduce the risk of recurrence. The depth of the investigation should be proportionate to the actual and potential consequences.
Why it matters
When an incident is closed after only recording the event and assigning an action, the same weakness can remain in the system. Quality, HSE and Operations managers need to be able to show which controls failed or were missing, what evidence supports the conclusions, which underlying causes need to be addressed and whether the resulting actions were effective. This is especially important in high-hazard operations, but the same discipline applies to quality incidents, deviations and near misses in regulated organisations. A well-run investigation creates a defensible basis for corrective action, trend analysis and learning across sites and teams.
Address urgent safety or operational needs while protecting records, physical evidence, system data and witness information that may otherwise be lost.
Stabilize the situation and preserve evidence
1
Establish the sequence of events, conditions and decisions using evidence rather than assumptions so the investigation starts from a defensible factual picture.
Reconstruct what happened
2
Examine immediate causes, underlying conditions and barriers or controls that failed, were missing or did not perform as expected.
Analyze causes and barriers
3
Choose Corrective Actions that address verified causes and control weaknesses rather than only correcting the visible outcome.
Define proportionate actions
4
Communicate lessons to the people, locations or processes exposed to similar risks without distributing unnecessary or misleading detail.
Share relevant learning
5
Check whether actions were implemented and whether the targeted weakness or recurrence risk has actually been reduced.
Verify effectiveness
6
Process explained
A structured incident investigation lifecycle
Incident Investigation should move from preserving evidence to understanding causes and strengthening controls. The depth should reflect actual and potential consequence, but the process should remain evidence-based and avoid stopping at blame or the last visible error.
The structured process for reporting, assessing, investigating, following up and learning from incidents and related events.
Incident Management
Process
· Incident Management
An event that did not result in injury, damage or loss but had the potential to do so under slightly different circumstances.
Near Miss
Event
· Incident Management
A systematic approach for identifying the underlying causes of a problem or event instead of addressing only its immediate symptoms.
Root Cause Analysis
Method
· CAPA & Incidents
A structured process for addressing causes of actual or potential problems through corrective or preventive measures and verifying that actions are effective.
CAPA
Process
· CAPA & Incidents
An action taken to eliminate the cause of a detected nonconformity, incident or other unwanted condition and reduce the chance of recurrence.
Corrective Action
Process
· CAPA & Incidents
A planned, evidence-based check that confirms an implemented corrective action or CAPA achieved its intended result and remains effective.
Effectiveness Check
Method
· CAPA & Incidents
Explore further
Related knowledge
Explore related standards, processes and quality-management concepts.
Relevant Icologiq capabilities
Explore the quality processes and platform capabilities connected to this topic.
In practice
Where this matters
See which industries and Icologiq capabilities are most closely connected to this topic.