Five Whys Incident Root Cause Analysis for Workplace Safety Training Course
| Course code | SD-OHS-027 |
|---|---|
| Duration | 5 days |
| Level | Intermediate to Advanced |
| Category | Occupational Health & Safety |
| Delivery | Classroom or live online |
| Language | English |
| Certificate | Certificate of completion |
Course overview
Workplace incidents are often closed with conclusions such as “operator error,” “lack of awareness,” or “failure to follow procedure.” These findings rarely explain why the error was possible, why the procedure was impractical, or why controls did not prevent harm. Safety professionals, supervisors and investigators need a disciplined way to move from an event description to evidence-based root causes that can be corrected. This course develops that capability using the Five Whys method for occupational health and safety incidents, near misses, unsafe conditions and recurring control failures.
Participants learn to frame a clear problem statement, distinguish immediate, contributing and root causes, and build a defensible causal chain without jumping to blame. The course covers evidence collection, witness interviewing, timeline reconstruction, barrier and control analysis, wording effective “why” questions, testing causal links and identifying corrective actions. Participants practise using Five Whys alongside ISO 45001 incident and nonconformity requirements, ensuring investigations lead to actions that address system weaknesses rather than superficial symptoms.
Delivery combines instructor-led explanation with realistic workplace safety cases from manufacturing, construction, logistics, laboratories and facilities operations. Participants work through incident records, photographs, maintenance data, permits, training records and witness statements to complete investigation worksheets. Each participant leaves with a completed Five Whys investigation pack: problem statement, evidence log, causal chain, root-cause validation notes, corrective-action register, action owners and effectiveness measures ready to adapt for their own workplace.
The course is designed for practitioners who already participate in incident reporting, safety inspections, corrective-action management or operational supervision and now need to lead stronger investigations. It is equally valuable to managers approving safety improvements, because it provides a repeatable method for deciding which corrective actions deserve time, budget and management attention.
Course objectives
By the end of this course, participants will be able to:
- Define investigation problem statements that separate the harmful event from assumptions about fault
- Construct a Five Whys causal chain using evidence from incident records, observations and witness accounts
- Differentiate immediate causes, contributing factors, root causes and failed safety controls
- Conduct structured witness interviews that generate factual evidence rather than leading responses
- Test each why-link for evidence, controllability and logical connection before confirming a root cause
- Develop corrective actions that address system causes, assigned owners, deadlines and effectiveness measures
- Apply ISO 45001 incident and nonconformity requirements to a Five Whys investigation record
- Produce a complete Five Whys incident investigation pack for a workplace safety case
Benefits of attending
For you
- Lead Five Whys investigations without defaulting to worker blame or unsupported conclusions
- Build evidence-based corrective-action proposals that can withstand management and audit challenge
- Improve credibility when briefing leaders on why an incident occurred and what must change
- Create clearer investigation records for ISO 45001 audits, regulator enquiries and internal reviews
- Expand readiness for HSE advisor, safety manager, operational assurance and incident-investigation responsibilities
For your organisation
- Reduce repeat incidents by correcting weak controls, procedures, maintenance practices and supervision arrangements
- Improve the quality and consistency of incident investigations across sites, departments and shift teams
- Prioritise corrective-action budgets using validated causal evidence rather than assumptions or blame
- Strengthen ISO 45001 nonconformity and continual-improvement records with traceable investigation logic
- Provide managers with action registers, owners and effectiveness checks that support reliable closure
Target competencies
Who should attend
- Health and Safety Managers — who must assure that incident investigations produce effective corrective actions
- HSE Officers and Advisors — who investigate workplace events and maintain incident records
- Operations Managers — who need to remove recurring process and control failures in their teams
- Supervisors and Team Leaders — who conduct first-line fact finding after incidents and near misses
- Quality, Compliance and Risk Managers — who must verify root-cause analysis and closure evidence
- Maintenance and Engineering Managers — who investigate equipment, isolation and preventive-maintenance failures
Requirements and prerequisites
Participants should have practical exposure to workplace safety processes, such as hazard reporting, incident reporting, risk assessment, inspections, permit-to-work, toolbox talks or corrective-action tracking. They should be able to read an incident report and understand basic terms including hazard, risk, control measure, near miss and corrective action. Experience leading formal investigations is not required, but participants will benefit from bringing one anonymised incident or recurring safety issue from their workplace. No statistical software, prior audit qualification, legal training or advanced root-cause-analysis certification is required. A laptop is useful for the final action-planning exercise.
Training methodology
The five-day programme uses short instructor-led briefings followed by progressively more demanding investigation workshops. Participants analyse incident narratives, photographs, permits, maintenance histories, training records and witness statements, then compare alternative causal chains in facilitated groups. The instructor challenges unsupported “why” answers and demonstrates how to document evidence, assumptions and control failures. Case work includes manual handling, machinery guarding, chemical exposure and vehicle-pedestrian events. On the final day, participants apply the method to an anonymised workplace issue and prepare an implementation plan for their reporting and corrective-action process.
Course outline
Day 1: Foundations of defensible safety investigations
- Purpose and limits of the Five Whys method in occupational safety
- Incident, near-miss, unsafe-condition and nonconformity classifications
- Separating facts, assumptions, interpretations and blame statements
- Writing a precise event-based problem statement
- Immediate causes, contributing factors and root causes
- ISO 45001 requirements for incidents, nonconformities and corrective action
- Investigation scope, roles, escalation thresholds and evidence preservation
Workshop: Participants convert poorly written incident summaries into scoped problem statements and an initial evidence-preservation checklist.
Day 2: Evidence gathering before asking why
- Evidence logs and source traceability
- Scene observations, photographs, sketches and measurement records
- Witness interview planning and non-leading question techniques
- Event timeline reconstruction using people, equipment and control records
- Reviewing risk assessments, safe systems of work and permits
- Using maintenance, inspection and training records as investigation evidence
- Recognising missing evidence, conflicting accounts and confirmation bias
Workshop: Working from a machinery-guarding case file, participants build an evidence log, timeline and witness-interview question set.
Day 3: Building and validating the Five Whys chain
- Starting each why with a verified event or condition
- Writing observable and testable why statements
- Branching causal chains when more than one condition contributed
- Distinguishing cause from correlation in incident findings
- Testing why-links against documentary, physical and testimonial evidence
- Identifying failed barriers, controls and recovery measures
- Knowing when Five Whys requires escalation to a wider investigation method
Workshop: Participants construct and challenge a branched Five Whys analysis for a forklift-pedestrian near miss, producing a validated causal chain.
Day 4: From root causes to effective corrective actions
- Translating root causes into control-focused corrective actions
- Hierarchy of controls in corrective-action selection
- Correcting procedure, competence, supervision and maintenance weaknesses
- Action-register fields for owners, deadlines, resources and dependencies
- Effectiveness measures and post-implementation verification
- Managing overdue, rejected and partially completed actions
- Communicating findings without assigning inappropriate individual blame
Workshop: Participants turn a completed Five Whys chain into a prioritised corrective-action register with control measures and verification criteria.
Day 5: Reporting, assurance and workplace application
- Structuring a concise Five Whys investigation report
- Recording evidence, assumptions, causal logic and limitations
- Presenting findings to operational leaders and safety committees
- Aligning investigation outputs with ISO 45001 continual improvement
- Trend analysis of repeated Five Whys findings in Excel
- Internal audit checks for investigation quality and action closure
- Implementing investigation templates, review gates and governance routines
Workshop: Participants complete a capstone investigation pack and create a 90-day plan for embedding Five Whys reviews in their workplace.
Tools & standards covered
ISO 45001:2018, ISO 45002:2023, Microsoft Excel, Microsoft Visio
A typical training day
| 08:30 – 10:30 | First session |
| 10:30 – 10:45 | Refreshment break |
| 10:45 – 12:30 | Second session |
| 12:30 – 13:30 | Lunch and networking |
| 13:30 – 15:00 | Third session |
| 15:00 – 15:15 | Refreshment break |
| 15:15 – 16:30 | Workshop and daily review |
Live online deliveries follow the same structure in the East Africa Time zone, with shorter screen blocks and longer breaks.
What the fee includes
- Instruction by a practitioner facilitator
- Full course workbook and materials
- Exercise files, templates and case studies
- Certificate of completion
- Refreshments and lunch (classroom deliveries)
- Post-course application plan
- Facilitator follow-up on request
- Group rates from five participants
How you can take this course
Classroom
Scheduled sessions in Nairobi, Mombasa, Kigali, Dar es Salaam, Dubai and Cape Town.
Live online
The same facilitator and materials, delivered live for distributed teams and individuals.
In-house
Delivered privately for your team, at your offices or a venue of your choice, tailored to your context. Request a proposal.
Certification
Participants who complete the full five days receive the Skillset Development Certificate of Completion, stating the course title, course code, dates and delivery format — suitable for professional-development records and employer reimbursement.
Frequently asked questions
Upcoming sessions
-
21 – 25 Sep 2026Book
Live Online · USD 1,500 -
21 – 25 Sep 2026Book
Dubai · USD 4,500 -
28 Sep – 02 Oct 2026Book
Nairobi · USD 3,000 -
28 Sep – 02 Oct 2026Book
Live Online · USD 1,500 -
28 Sep – 02 Oct 2026Book
Kigali · USD 3,500 -
05 – 09 Oct 2026Book
Live Online · USD 1,500 -
05 – 09 Oct 2026Book
Dar es Salaam · USD 3,500 -
19 – 23 Oct 2026Book
Live Online · USD 1,500
49 more dates — ask us.
Group of 5+?
Request in-house delivery or group rates →Related courses in Occupational Health & Safety
Workplace Safety Supervision for Frontline Supervisors Training Course
Frontline supervisors make the daily decisions that determine whether safety controls work: allocating work, checking permits, responding to…
Occupational Hygiene Exposure Assessment Fundamentals Training Course
Occupational hygiene decisions are only as reliable as the exposure information behind them. Safety professionals, HSE advisers and operatio…
SafetyCulture iAuditor Safety Inspection and Audit Training Course
Paper checklists, emailed inspection reports and disconnected corrective-action registers make it difficult to prove that workplace hazards …
Oil and Gas Permit to Work Safety Management Training Course
Permit-to-work (PTW) failures in oil and gas operations rarely result from a missing signature alone. They arise when isolations are incompl…