Incident Reporting and Investigation Training Course

Duration 5 days 10 modules · 33 contact hours
Level Intermediate Certificate on completion
Who attends HSE Managers, Safety Officers and others
Fee from USD 1,100 KSh 95,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-OHS-065

Before you join: Participants should have practical familiarity with workplace safety procedures, operational supervision, risk assessments or incident reporting.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Poor incident reporting loses critical facts in the first hours, while weak investigations often stop at frontline error and produce actions that do not prevent recurrence. The consequences include repeated injuries, avoidable operational disruption, regulatory exposure, damaged trust and missed opportunities to improve controls. Effective investigation requires disciplined evidence handling, fair interviewing, causal analysis and corrective actions that address failed barriers rather than blame individuals.

This five-day Incident Reporting and Investigation Training Course develops the practical methods needed to manage incidents from initial notification through report closure and effectiveness review. Participants learn to classify incidents and near misses, preserve scenes and evidence, interview witnesses using the PEACE structure, reconstruct timelines, test causal explanations and apply ICAM, Five Whys and bow-tie analysis. The course also addresses report writing, action tracking, learning reviews, reporting governance and ISO 45001 requirements for incidents, nonconformities and corrective action.

Teaching combines short instructor briefings with case work, facilitated group analysis, interview simulations and investigation-report reviews. Participants work with realistic scenarios such as plant incidents, contractor injuries, vehicle collisions, chemical releases and unsafe process deviations. They leave with a reusable incident investigation pack containing reporting tools, evidence records, interview guides, causal-analysis models, report structures and corrective-action controls. The course is delivered instructor-led over five days, from 08:30 to 16:30, in classrooms in 50+ cities or live online. Participants receive a certificate of completion.

The course suits professionals who already contribute to safety reporting, supervision, assurance or operational risk management and now need to lead, support or review investigations with greater consistency and defensible evidence.

What you will be able to do

  • Classify incidents, near misses and hazards using severity, potential and reporting thresholds
  • Initiate first-hour incident response actions, escalation routes and scene-preservation controls
  • Collect, preserve and assess physical, documentary, digital and witness evidence
  • Conduct structured witness interviews using PEACE questioning and statement-verification techniques
  • Analyse incident causation using Five Whys, ICAM, event charts and causal-factor testing
  • Evaluate failed barriers and select controls using bow-tie analysis and the hierarchy of controls
  • Write evidence-based investigation reports with clear findings, causal statements and recommendations
  • Design corrective-action plans with ownership, verification measures, closure evidence and governance

Benefits of attending

For you

  • Conduct defensible investigations without relying on blame or unsupported assumptions
  • Prepare clearer incident reports for managers, regulators and assurance functions
  • Interview witnesses with greater confidence, fairness and evidential discipline
  • Identify underlying control failures rather than stopping at immediate causes
  • Build a practical investigation portfolio for HSE, supervisory or operational roles

For your organisation

  • Improves the quality and consistency of incident reports across sites and teams
  • Reduces repeat incidents through actions linked to verified causal factors
  • Strengthens evidence records for regulatory review, claims and internal assurance
  • Supports ISO 45001 incident, nonconformity and corrective-action processes
  • Improves reporting culture by separating learning from inappropriate blame

Course modules

10 modules over 5 days

Participants can classify incidents and determine appropriate reporting, escalation and investigation requirements.

  • Incident, near-miss and hazard definitions under ISO 45001 terminology
  • Reporting thresholds based on actual, potential and credible worst-case harm
  • Just culture principles separating human error, at-risk behaviour and recklessness
  • Immediate reporting routes, escalation authorities and statutory notification triggers
  • Roles of witnesses, supervisors, investigators and incident owners
  • Reportable-event classification using severity, exposure and recurrence potential

Participants can manage first-hour response activities while protecting people, evidence and reporting obligations.

  • First-hour actions: rescue, medical response, scene control and notification
  • Dynamic risk assessment before entering damaged, contaminated or unstable scenes
  • Scene preservation controls for equipment, documents, digital records and CCTV
  • Chain-of-custody records for samples, photographs, removed parts and documents
  • Initial incident log capturing timeline, people, conditions and decisions
  • Communications protocols for families, regulators, clients and senior leadership

Participants can collect reliable evidence and reconstruct an evidence-based account of events.

  • Evidence plan linking investigation questions, sources, collection methods and owners
  • Photographic evidence: scales, orientation, metadata and contemporaneous annotations
  • Physical evidence handling without altering marks, settings or component positions
  • Document review of permits, procedures, training records and maintenance history
  • Timeline reconstruction using event sequencing, clock checks and evidence gaps
  • Data quality tests for relevance, reliability, sufficiency and corroboration

Participants can prepare and conduct fair, structured witness interviews that produce reliable accounts.

  • Cognitive interviewing techniques that minimise suggestion, blame and memory contamination
  • PEACE interview structure: planning, engagement, account, closure and evaluation
  • Open, probing and clarifying questions matched to witness accounts
  • Interview preparation using role, location, chronology and evidence matrices
  • Note-taking, recording consent and accurate statement verification procedures
  • Managing distress, conflict, language barriers and power differences during interviews

Participants can identify immediate causes, contributing factors and underlying organisational causes using tested methods.

  • Five Whys used without stopping at individual error or rule breach
  • ICAM analysis of absent or failed defences and organisational factors
  • Cause-and-effect diagrams separating people, plant, process and environmental contributors
  • Event and causal factor charting from evidence-based timelines
  • Distinguishing immediate causes, contributing factors, root causes and conditions
  • Testing causal statements against contradictory evidence and alternative explanations

Participants can assess failed controls and select proportionate measures to prevent recurrence.

  • Bow-tie analysis connecting threats, preventive barriers, consequences and recovery controls
  • Barrier status assessment for availability, suitability, reliability and effectiveness
  • Hierarchy of controls applied to investigation findings and residual risk
  • Control failures traced through design, maintenance, supervision and work planning
  • Human factors conditions: workload, fatigue, competence, interface and procedure usability
  • ALARP reasoning when selecting proportionate additional risk controls

Participants can produce clear investigation reports supported by evidence, causal logic and actionable findings.

  • Investigation report structure: scope, facts, analysis, findings and recommendations
  • Separating verified facts, assumptions, opinions and untested allegations
  • Clear causal language that avoids blame, speculation and legal conclusions
  • Evidence references supporting each finding, diagram, photograph and timeline entry
  • Executive summaries framed around harm, causes, controls and decisions
  • Confidentiality, personal data and privileged material handling in reports

Participants can create corrective-action plans that address causal factors and demonstrate sustained control improvement.

  • SMART corrective actions linked directly to verified causal factors
  • Action quality criteria: ownership, due date, resources, measures and dependencies
  • Corrective-action hierarchy favouring elimination and engineering over administrative controls
  • Effectiveness verification using leading indicators, field checks and worker feedback
  • Management of change controls for revised equipment, procedures and training
  • Action tracking registers with overdue escalation and closure evidence

Participants can apply investigation governance, reporting duties and learning processes to improve safety performance.

  • ISO 45001 incident, nonconformity and corrective-action requirements clauses
  • Statutory reporting triggers distinguished from internal escalation requirements
  • Governance roles for independence, authority, review and action assurance
  • Investigation level selection based on consequence, potential and learning value
  • Trend analysis using frequency, severity, exposure and repeat-event patterns
  • Learning reviews that share findings without identifying or shaming individuals

Participants can plan practical improvements to local reporting, investigation and corrective-action processes.

  • Investigation workflow from notification through closure and effectiveness review
  • Role-specific reporting expectations for workers, supervisors, managers and contractors
  • Escalation matrix aligned with severity, potential consequence and notification deadlines
  • Personal investigation development plan with supervised casework milestones
  • Local reporting barriers identified through process mapping and stakeholder feedback
  • Measures for reporting quality, investigation timeliness and action completion

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Incident classification and escalation matrix
  2. First-hour response and scene-preservation checklist
  3. Evidence collection and chain-of-custody template
  4. PEACE witness interview guide
  5. ICAM and bow-tie causal-analysis model
  6. Corrective-action and effectiveness-verification register

Who should attend

  • HSE Managers — need consistent investigation quality and effective corrective-action assurance
  • Safety Officers — conduct or support incident reporting, evidence collection and follow-up
  • Operations Managers — must lead immediate response and prevent repeat operational failures
  • Supervisors and Team Leaders — receive first reports and manage local fact-finding
  • Risk and Compliance Professionals — review reportability, governance and action closure
  • HR and Employee Relations Professionals — support fair investigations involving people and conduct

Skills and tools covered

Incident classificationEvidence preservationWitness interviewingCausal analysisBarrier assessmentCorrective-action management

Tools and standards

ISO 45001, ICAM, Five Whys, Bow-tie analysis

How the course runs

Training methodology

The course uses short instructor briefings to introduce investigation methods, followed by realistic incident cases, group evidence reviews, timeline construction and causal-analysis work. Participants practise structured questioning through interview simulations and assess reports for factual accuracy, causal logic and action quality. Facilitated discussions examine reporting decisions, failed barriers, human factors and corrective-action effectiveness. Each participant prepares an application plan for improving reporting or investigation practice in their own role, team or site.

Requirements and prerequisites

Participants should have practical familiarity with workplace safety procedures, operational supervision, risk assessments or incident reporting. They should be comfortable reading procedures, recording factual information and participating in discussions about work activities and controls. Previous experience leading formal investigations is not required. The course does not require engineering qualifications, legal training, prior knowledge of ICAM or specialist forensic expertise. Participants from operational, HSE, HR, compliance and assurance roles can attend, provided they understand the types of work, hazards and reporting routes used in their own workplace.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

You should understand basic workplace safety procedures, operational risks or incident reporting routes. You do not need previous investigation-lead experience, legal qualifications or prior training in ICAM.

Bring a laptop or tablet if possible, plus examples of your organisation's incident form, investigation report or action tracker if these can be shared appropriately. Personal, medical, commercially sensitive or legally restricted case information should not be brought to class.

The course is designed for HSE staff, supervisors, managers, compliance professionals, HR practitioners and others who report, investigate, review or approve incident findings. It is particularly useful for people moving from basic reporting responsibilities into structured investigation work.

Risk assessment training focuses on identifying hazards before an event and selecting controls. This course focuses on what happens after an incident or near miss: evidence preservation, interviewing, causal analysis, reporting and corrective-action verification.

Participants can use the reporting matrix, evidence checklist, interview guide, causal-analysis model and action tracker on real incidents. The application plan helps participants identify one reporting or investigation process to improve with their manager or HSE team.

The course runs from 08:30 to 16:30 each day, with approximately 6.5 contact hours daily. Time is divided between instructor input, case analysis, group work, interview simulations, report reviews and application planning.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.