ICAM Incident Investigation Method for Workplace Safety Training Course

Course overview

Workplace incidents are often closed with a short statement of what happened and a corrective action aimed at the person closest to the event. That approach can leave failed controls, poorly designed tasks, weak supervision, maintenance gaps and decision-making failures untouched. The ICAM Incident Investigation Method provides a disciplined way to move beyond immediate causes, establish a defensible evidence base and identify the organisational conditions that allowed an event to occur. It is suited to safety professionals and operational leaders who need investigations that withstand management, regulator, worker representative and client scrutiny.

This five-day course teaches participants to plan and conduct an ICAM investigation from notification through to corrective-action verification. Participants practise defining scope, preserving evidence, interviewing witnesses, building event timelines and testing evidence against the four ICAM analysis areas: absent or failed defences, individual and team actions, task and environmental conditions, and organisational factors. They learn to distinguish facts from assumptions, formulate causal findings without blame, develop controls using the hierarchy of controls, and write investigation reports that clearly connect evidence, contributing factors and recommendations.

Teaching combines instructor-led demonstrations, guided analysis of a realistic workplace incident case, interview simulations, group evidence reviews and report-writing workshops. Participants work with ICAM investigation templates, evidence logs, timelines, causal-analysis worksheets and action registers. By the end of the course, each participant leaves with a completed ICAM investigation pack for a case scenario, including a scope statement, evidence register, timeline, ICAM analysis, findings, corrective-action plan and implementation measures that can be adapted for their workplace.

The course is designed for foundation-to-intermediate practitioners who participate in, lead or quality-assure workplace incident investigations across construction, manufacturing, logistics, mining, energy, utilities, facilities and other operational environments.

Course objectives

By the end of this course, participants will be able to:

• Plan an ICAM investigation using a defined scope, investigation charter, roles and evidence-preservation checklist
• Construct an evidence-based event timeline from documents, site observations, photographs and witness accounts
• Conduct non-leading witness interviews using structured question plans, active listening and statement validation
• Classify contributing factors across the ICAM categories of failed defences, actions, conditions and organisational factors
• Test causal hypotheses against corroborated evidence and separate verified facts from assumptions
• Develop corrective actions using the hierarchy of controls and clear action-owner, due-date and verification fields
• Write an ICAM investigation report that links evidence, analysis, findings, recommendations and residual risk
• Present investigation findings to managers and workers using a concise briefing and action-tracking register

Benefits of attending

Target competencies

Who should attend

• Health and Safety Advisors — who lead or support investigations and need a consistent causal-analysis method
• HSE Managers — who must assure investigation quality and convert findings into system-level improvements
• Operations Managers — who are accountable for corrective actions following incidents in their work areas
• Supervisors and Frontline Managers — who gather initial facts and must avoid premature conclusions after an event
• Incident Investigation Team Members — who need defined roles for evidence collection, interviews and analysis
• Human Resources and Risk Professionals — who contribute to investigations involving people, systems and organisational controls

Requirements and prerequisites

This is a foundation-to-intermediate course. Participants should understand basic workplace safety concepts such as hazards, risks, controls, incident reporting and the hierarchy of controls. Experience working in an operational, safety, maintenance, supervisory or risk role is helpful, but prior formal investigation training is not required. Complete beginners should expect to learn the language and workflow of an investigation before applying ICAM to a case. Participants do not need specialist forensic tools, legal qualifications, statistics software or prior knowledge of ISO 45001. A laptop is useful for working with templates during live online delivery, but is not essential for classroom attendance.

Training methodology

The programme uses a single realistic workplace incident case that develops across five days, mirroring the sequence of a live investigation. Instructor-led sessions introduce ICAM concepts and demonstrate templates; participants then work in investigation teams to review evidence, plan interviews, build timelines, analyse contributing factors and draft findings. Role-play interviews expose common problems such as leading questions and unsupported conclusions. Daily debriefs compare alternative analyses against the available evidence. The final day includes a management briefing simulation and an individual application plan for adapting the ICAM workflow, forms and governance to each participant's workplace.

Course outline

Day 1: ICAM foundations and investigation planning

• Purpose and principles of the ICAM Incident Investigation Method
• Incident versus accident, event, consequence and potential consequence
• Investigation levels, triggers and proportionality decisions
• Investigation roles, independence and conflict-of-interest controls
• Initial response, scene preservation and evidence security
• Investigation charter, scope statement and terms of reference
• ICAM evidence register and investigation planning checklist

Workshop: Teams receive an incident notification and produce an investigation charter, scope statement, initial evidence register and 48-hour investigation plan.

Day 2: Evidence collection and fact development

• Evidence types: physical, documentary, digital, testimonial and observational
• Photograph, sketch and site-observation protocols
• Document review for permits, procedures, training and maintenance records
• Chain of custody and version control for investigation records
• Witness selection and interview sequencing
• Non-leading interview questions and cognitive interviewing techniques
• Fact, interpretation, assumption and inference testing

Workshop: Participants conduct a simulated witness interview, assess supplied records and create a validated evidence log with evidence gaps identified.

Day 3: Timeline construction and ICAM analysis

• Event-and-conditions timeline construction
• Critical event identification and point-of-control analysis
• Absent or failed defences in the ICAM framework
• Individual and team actions contributing to the event
• Task and environmental conditions affecting work performance
• Organisational factors behind local conditions and decisions
• Causal factor testing and competing-hypothesis review

Workshop: Teams build a visual event timeline and complete an ICAM causal-analysis worksheet using corroborated case evidence.

Day 4: Findings, controls and report development

• Writing factual findings and evidence citations
• Distinguishing contributing factors from root-cause labels
• Hierarchy of controls applied to corrective-action design
• Control quality tests: specificity, feasibility, ownership and verification
• Action registers, due dates and accountable action owners
• Residual risk assessment after corrective actions
• ICAM report structure, executive summary and appendices

Workshop: Participants convert their ICAM analysis into findings, recommendations and a corrective-action register, then draft key sections of the investigation report.

Day 5: Assurance, communication and workplace application

• Quality assurance review of ICAM investigation reports
• Testing recommendation effectiveness and closure evidence
• Management briefing techniques for sensitive findings
• Communicating findings to workers without assigning blame
• Integrating investigation outputs with ISO 45001 corrective-action processes
• Trend analysis across multiple ICAM investigations
• Workplace implementation plan for templates, governance and capability

Workshop: Each team delivers a management briefing on its completed case investigation and produces a 90-day plan for introducing or improving ICAM practice at work.

Tools & standards covered

ICAM Investigation Guide, ISO 45001:2018, ISO 31000:2018, Microsoft Excel

A typical training day

Live online deliveries follow the same structure in the East Africa Time zone, with shorter screen blocks and longer breaks.

What the fee includes

How you can take this course

Certification

Participants who complete the full five days receive the Skillset Development Certificate of Completion, stating the course title, course code, dates and delivery format — suitable for professional-development records and employer reimbursement.

Frequently asked questions