Five Whys Incident Root Cause Analysis for Workplace Safety Training Course

5 days Occupational Health & Safety Certificate on completion
Course codeSD-OHS-027
Duration5 days
LevelIntermediate to Advanced
CategoryOccupational Health & Safety
DeliveryClassroom or live online
LanguageEnglish
CertificateCertificate of completion

Course overview

Workplace incidents are often closed with conclusions such as “operator error,” “lack of awareness,” or “failure to follow procedure.” These findings rarely explain why the error was possible, why the procedure was impractical, or why controls did not prevent harm. Safety professionals, supervisors and investigators need a disciplined way to move from an event description to evidence-based root causes that can be corrected. This course develops that capability using the Five Whys method for occupational health and safety incidents, near misses, unsafe conditions and recurring control failures.

Participants learn to frame a clear problem statement, distinguish immediate, contributing and root causes, and build a defensible causal chain without jumping to blame. The course covers evidence collection, witness interviewing, timeline reconstruction, barrier and control analysis, wording effective “why” questions, testing causal links and identifying corrective actions. Participants practise using Five Whys alongside ISO 45001 incident and nonconformity requirements, ensuring investigations lead to actions that address system weaknesses rather than superficial symptoms.

Delivery combines instructor-led explanation with realistic workplace safety cases from manufacturing, construction, logistics, laboratories and facilities operations. Participants work through incident records, photographs, maintenance data, permits, training records and witness statements to complete investigation worksheets. Each participant leaves with a completed Five Whys investigation pack: problem statement, evidence log, causal chain, root-cause validation notes, corrective-action register, action owners and effectiveness measures ready to adapt for their own workplace.

The course is designed for practitioners who already participate in incident reporting, safety inspections, corrective-action management or operational supervision and now need to lead stronger investigations. It is equally valuable to managers approving safety improvements, because it provides a repeatable method for deciding which corrective actions deserve time, budget and management attention.

Course objectives

By the end of this course, participants will be able to:

  • Define investigation problem statements that separate the harmful event from assumptions about fault
  • Construct a Five Whys causal chain using evidence from incident records, observations and witness accounts
  • Differentiate immediate causes, contributing factors, root causes and failed safety controls
  • Conduct structured witness interviews that generate factual evidence rather than leading responses
  • Test each why-link for evidence, controllability and logical connection before confirming a root cause
  • Develop corrective actions that address system causes, assigned owners, deadlines and effectiveness measures
  • Apply ISO 45001 incident and nonconformity requirements to a Five Whys investigation record
  • Produce a complete Five Whys incident investigation pack for a workplace safety case

Benefits of attending

For you

  • Lead Five Whys investigations without defaulting to worker blame or unsupported conclusions
  • Build evidence-based corrective-action proposals that can withstand management and audit challenge
  • Improve credibility when briefing leaders on why an incident occurred and what must change
  • Create clearer investigation records for ISO 45001 audits, regulator enquiries and internal reviews
  • Expand readiness for HSE advisor, safety manager, operational assurance and incident-investigation responsibilities

For your organisation

  • Reduce repeat incidents by correcting weak controls, procedures, maintenance practices and supervision arrangements
  • Improve the quality and consistency of incident investigations across sites, departments and shift teams
  • Prioritise corrective-action budgets using validated causal evidence rather than assumptions or blame
  • Strengthen ISO 45001 nonconformity and continual-improvement records with traceable investigation logic
  • Provide managers with action registers, owners and effectiveness checks that support reliable closure

Target competencies

Five Whys facilitationEvidence-based investigationCausal chain testingWitness interviewingCorrective action designControl effectiveness review

Who should attend

  • Health and Safety Managers — who must assure that incident investigations produce effective corrective actions
  • HSE Officers and Advisors — who investigate workplace events and maintain incident records
  • Operations Managers — who need to remove recurring process and control failures in their teams
  • Supervisors and Team Leaders — who conduct first-line fact finding after incidents and near misses
  • Quality, Compliance and Risk Managers — who must verify root-cause analysis and closure evidence
  • Maintenance and Engineering Managers — who investigate equipment, isolation and preventive-maintenance failures

Requirements and prerequisites

Participants should have practical exposure to workplace safety processes, such as hazard reporting, incident reporting, risk assessment, inspections, permit-to-work, toolbox talks or corrective-action tracking. They should be able to read an incident report and understand basic terms including hazard, risk, control measure, near miss and corrective action. Experience leading formal investigations is not required, but participants will benefit from bringing one anonymised incident or recurring safety issue from their workplace. No statistical software, prior audit qualification, legal training or advanced root-cause-analysis certification is required. A laptop is useful for the final action-planning exercise.

Training methodology

The five-day programme uses short instructor-led briefings followed by progressively more demanding investigation workshops. Participants analyse incident narratives, photographs, permits, maintenance histories, training records and witness statements, then compare alternative causal chains in facilitated groups. The instructor challenges unsupported “why” answers and demonstrates how to document evidence, assumptions and control failures. Case work includes manual handling, machinery guarding, chemical exposure and vehicle-pedestrian events. On the final day, participants apply the method to an anonymised workplace issue and prepare an implementation plan for their reporting and corrective-action process.

Course outline

Day 1: Foundations of defensible safety investigations

  • Purpose and limits of the Five Whys method in occupational safety
  • Incident, near-miss, unsafe-condition and nonconformity classifications
  • Separating facts, assumptions, interpretations and blame statements
  • Writing a precise event-based problem statement
  • Immediate causes, contributing factors and root causes
  • ISO 45001 requirements for incidents, nonconformities and corrective action
  • Investigation scope, roles, escalation thresholds and evidence preservation

Workshop: Participants convert poorly written incident summaries into scoped problem statements and an initial evidence-preservation checklist.

Day 2: Evidence gathering before asking why

  • Evidence logs and source traceability
  • Scene observations, photographs, sketches and measurement records
  • Witness interview planning and non-leading question techniques
  • Event timeline reconstruction using people, equipment and control records
  • Reviewing risk assessments, safe systems of work and permits
  • Using maintenance, inspection and training records as investigation evidence
  • Recognising missing evidence, conflicting accounts and confirmation bias

Workshop: Working from a machinery-guarding case file, participants build an evidence log, timeline and witness-interview question set.

Day 3: Building and validating the Five Whys chain

  • Starting each why with a verified event or condition
  • Writing observable and testable why statements
  • Branching causal chains when more than one condition contributed
  • Distinguishing cause from correlation in incident findings
  • Testing why-links against documentary, physical and testimonial evidence
  • Identifying failed barriers, controls and recovery measures
  • Knowing when Five Whys requires escalation to a wider investigation method

Workshop: Participants construct and challenge a branched Five Whys analysis for a forklift-pedestrian near miss, producing a validated causal chain.

Day 4: From root causes to effective corrective actions

  • Translating root causes into control-focused corrective actions
  • Hierarchy of controls in corrective-action selection
  • Correcting procedure, competence, supervision and maintenance weaknesses
  • Action-register fields for owners, deadlines, resources and dependencies
  • Effectiveness measures and post-implementation verification
  • Managing overdue, rejected and partially completed actions
  • Communicating findings without assigning inappropriate individual blame

Workshop: Participants turn a completed Five Whys chain into a prioritised corrective-action register with control measures and verification criteria.

Day 5: Reporting, assurance and workplace application

  • Structuring a concise Five Whys investigation report
  • Recording evidence, assumptions, causal logic and limitations
  • Presenting findings to operational leaders and safety committees
  • Aligning investigation outputs with ISO 45001 continual improvement
  • Trend analysis of repeated Five Whys findings in Excel
  • Internal audit checks for investigation quality and action closure
  • Implementing investigation templates, review gates and governance routines

Workshop: Participants complete a capstone investigation pack and create a 90-day plan for embedding Five Whys reviews in their workplace.

Tools & standards covered

ISO 45001:2018, ISO 45002:2023, Microsoft Excel, Microsoft Visio

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in the East Africa Time zone, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Certificate of completion
  • Refreshments and lunch (classroom deliveries)
  • Post-course application plan
  • Facilitator follow-up on request
  • Group rates from five participants

How you can take this course

Classroom

Scheduled sessions in Nairobi, Mombasa, Kigali, Dar es Salaam, Dubai and Cape Town.

Live online

The same facilitator and materials, delivered live for distributed teams and individuals.

In-house

Delivered privately for your team, at your offices or a venue of your choice, tailored to your context. Request a proposal.

Certification

Participants who complete the full five days receive the Skillset Development Certificate of Completion, stating the course title, course code, dates and delivery format — suitable for professional-development records and employer reimbursement.

Frequently asked questions

No formal investigation qualification is required, but the course assumes familiarity with basic workplace safety concepts such as hazards, controls, near misses and corrective actions. Participants who have reviewed incident reports, carried out inspections or supervised operational work will gain the most immediate benefit.

A laptop is recommended for the final action-planning and Excel trend-analysis activities, although paper worksheets are provided for all core exercises. Participants may also bring an anonymised incident report, recurring near-miss theme or corrective-action example from their workplace.

It is intended for HSE practitioners, supervisors, operations managers, maintenance leaders and assurance staff who contribute to safety investigations. It is particularly useful where reports repeatedly identify “human error” but corrective actions have not stopped recurrence.

This programme concentrates on applying, testing and documenting Five Whys in workplace safety cases rather than surveying many investigation models at a high level. Participants spend substantial time validating causal links, identifying failed controls and converting findings into measurable corrective actions.

You can use the supplied investigation pack to structure a near-miss review, incident debrief or recurring nonconformity investigation. The method can be incorporated into existing incident-reporting forms, safety committee reviews and corrective-action registers.

You leave with a completed case-based Five Whys investigation pack, including an evidence log, causal chain, root-cause validation notes and corrective-action register. You will also have a 90-day implementation plan for adapting the process to your site's reporting and governance arrangements.

Upcoming sessions

  • 21 – 25 Sep 2026
    Live Online · USD 1,500
    Book
  • 21 – 25 Sep 2026
    Dubai · USD 4,500
    Book
  • 28 Sep – 02 Oct 2026
    Nairobi · USD 3,000
    Book
  • 28 Sep – 02 Oct 2026
    Live Online · USD 1,500
    Book
  • 28 Sep – 02 Oct 2026
    Kigali · USD 3,500
    Book
  • 05 – 09 Oct 2026
    Live Online · USD 1,500
    Book
  • 05 – 09 Oct 2026
    Dar es Salaam · USD 3,500
    Book
  • 19 – 23 Oct 2026
    Live Online · USD 1,500
    Book

49 more dates — ask us.


Group of 5+?

Request in-house delivery or group rates →

Related courses in Occupational Health & Safety

5 Days Certificate

Workplace Safety Supervision for Frontline Supervisors Training Course

Frontline supervisors make the daily decisions that determine whether safety controls work: allocating work, checking permits, responding to…

5 Days Certificate

Occupational Hygiene Exposure Assessment Fundamentals Training Course

Occupational hygiene decisions are only as reliable as the exposure information behind them. Safety professionals, HSE advisers and operatio…

5 Days Certificate

SafetyCulture iAuditor Safety Inspection and Audit Training Course

Paper checklists, emailed inspection reports and disconnected corrective-action registers make it difficult to prove that workplace hazards …

5 Days Certificate

Oil and Gas Permit to Work Safety Management Training Course

Permit-to-work (PTW) failures in oil and gas operations rarely result from a missing signature alone. They arise when isolations are incompl…