API QUPA study materials
API QUPA study resources

Incident Investigation Element Fails After a Near-Miss Cluster

API QUPA · Put your knowledge to work in context.

All case studies

Incident Investigation Element Fails After a Near-Miss Cluster

An operator reports four near-misses in six months at the same pump station: two pressure excursions, one relief-valve lift, and one loss of communication with the control room. Each was investigated separately by the shift supervisor and closed with 'operator error - coached.' No trend analysis was performed, and none of the four investigations identified the shared station. The SMS assessment finds the incident investigation element documented in procedure but producing investigations that never reach root cause or look across events. The operator's management review minutes show the near-misses were reported as 'no injuries, no releases.' The assessor must rate the element and recommend action.

1. How should the assessor rate and characterize the incident investigation element, and what evidence supports that rating?

Read the worked answer

The element should be rated as a systemic weakness, not a documentation gap. The procedure exists, but the output is defective:

  • No root cause. 'Operator error - coached' is a stopping point, not an analysis. Four events at one station with different symptoms (pressure, relief lift, comms loss) point to a common station-level cause the investigations never looked for.
  • No cross-event learning. Investigating each event in isolation defeats the purpose of the element, which is to detect patterns. The shared location is the obvious pattern and was missed.
  • Management review blind spot. Reporting the cluster as 'no injuries, no releases' shows the review is measuring outcomes, not process health - the near-misses were a free warning that was discarded.
  • Competence/independence. Shift supervisors investigating events on their own shift may lack training and objectivity.

Evidence to cite: the four investigation records, the identical closure language, absence of any trend log, and the management review minutes.

2. What corrective actions would move this element from weak to effective, and how should the assessor verify them?

Read the worked answer

Actions should target the investigation system, not the four events:

  1. Trained investigators independent of the shift involved, with a defined root-cause method (e.g., causal-factor analysis) and a required depth standard.
  2. Trending process - a log that aggregates near-misses by location and type, reviewed on a set cadence, with a trigger for clustered events.
  3. Management review change - review process indicators (near-miss trends, investigation depth, corrective-action effectiveness), not just injury/release counts.
  4. Reopen or re-analyze the four events as a cluster to find the station-level cause.

Verification: the assessor should not accept the revised procedure as closure. Require evidence of at least one full cycle - a new near-miss investigated to root cause by a trained, independent investigator, entered in the trend log, and reviewed in management review with a documented decision. Confirm the station-level cause from the reopened cluster was identified and addressed. Closure rests on demonstrated output, not on a new procedure document.