NEBOSH Incident Investigation study materials
NEBOSH Incident Investigation study resources

NEBOSH Incident Investigation key terms

NEBOSH Incident Investigation · Get comfortable with the vocabulary.

Incident

Any unplanned event, or near miss, that caused or could have caused injury, ill health, damage to property, environmental harm, or a disruption to normal work activity.

Related: Near Miss, Accident
Accident

An unplanned event that actually resulted in injury, ill health, property damage, or another loss, distinguishing it from a near miss where no loss occurred.

Related: Incident, Near Miss
Near Miss

An unplanned event that did not cause injury or damage but had the potential to do so, often revealing the same underlying failures as a serious accident.

Related: Incident, Accident
Incident Investigation

The systematic process of gathering and analysing evidence about an incident to establish what happened, why it happened, and what actions will prevent recurrence.

Related: Root Cause Analysis, Corrective Action
Immediate Cause

The direct act or condition that produced the incident at the point of contact, such as a slip, a fall, or contact with moving machinery.

Related: Root Cause, Unsafe Act
Root Cause

The underlying management or organisational failure that, if corrected, would prevent the incident and similar events from happening again.

Related: Immediate Cause, Root Cause Analysis
Root Cause Analysis

A structured method such as 5 Whys, fault tree analysis, or Ishikawa diagrams used to trace an incident back to its underlying causal factors.

Related: Root Cause, 5 Whys
5 Whys

A simple questioning technique that repeatedly asks why a condition or behaviour occurred, typically five times, to move from symptoms towards underlying causes.

Related: Root Cause Analysis, Root Cause
Ishikawa Diagram

A cause-and-effect diagram, often called a fishbone diagram, that groups possible causes under headings such as people, equipment, materials, methods, measurement, and environment.

Related: Root Cause Analysis, Brainstorming
Fault Tree Analysis

A deductive technique that starts with the unwanted top event and works backwards through the combinations of failures and conditions that could produce it.

Related: Root Cause Analysis, Bowtie Analysis
Bowtie Analysis

A diagrammatic risk tool that places the incident at the centre, with threats and preventive barriers on one side and consequences and mitigative barriers on the other.

Related: Fault Tree Analysis, Barrier
Unsafe Act

A behaviour by a person that deviates from a safe procedure or accepted practice and increases the likelihood of an incident occurring.

Related: Unsafe Condition, Behavioural Factor
Unsafe Condition

A physical or organisational state, such as a damaged guard or poor housekeeping, that creates a hazard and contributes to the chance of an incident.

Related: Unsafe Act, Hazard
Human Factors

The physical, psychological, and organisational influences on how people perform at work, including fatigue, workload, competence, communication, and interface design.

Related: Behavioural Factor, Latent Failure
Behavioural Factor

A contributing influence on an incident arising from what people did or did not do, including decisions, habits, shortcuts, and compliance with rules.

Related: Human Factors, Unsafe Act
Latent Failure

A hidden weakness in management systems, design, or organisation that lies dormant until combined with other factors to cause an incident.

Related: Active Failure, Root Cause
Active Failure

An error or violation committed by a person at the point of work whose effects are felt almost immediately, such as operating a machine without a guard.

Related: Latent Failure, Unsafe Act
Swiss Cheese Model

A model showing that incidents occur when weaknesses in several layers of protection line up, allowing a hazard to pass through all barriers.

Related: Barrier, Latent Failure
Barrier

A control, physical or procedural, intended to prevent an unwanted event or to limit its consequences, such as a guard, permit, or alarm.

Related: Bowtie Analysis, Hierarchy of Control
Hierarchy of Control

The ranked order of risk controls from elimination and substitution down to engineering, administrative, and personal protective measures, used to judge the adequacy of corrective actions.

Related: Corrective Action, Barrier
Corrective Action

A measure taken to eliminate the cause of a detected nonconformity or incident and prevent it from recurring, ideally addressing root causes rather than symptoms.

Related: Root Cause, Hierarchy of Control
Immediate Action

The urgent steps taken at the scene to make the situation safe, treat casualties, and preserve evidence before a full investigation begins.

Related: Scene Preservation, Evidence
Scene Preservation

Protecting the incident location, equipment, and physical traces from disturbance or removal so that accurate evidence can be collected later.

Related: Evidence, Chain of Custody
Evidence

Information collected about an incident, including physical items, documents, photographs, witness statements, and measurements, used to establish facts.

Related: Scene Preservation, Witness Statement
Chain of Custody

A documented record showing who collected, handled, and stored each piece of evidence and when, preserving its integrity for later analysis or legal use.

Related: Evidence, Scene Preservation
Witness Statement

A written account of what a witness saw, heard, or did, recorded as soon as practicable and in the witness's own words where possible.

Related: Interview, Evidence
Interview

A structured conversation with a witness or involved person to obtain factual information about the incident, conducted fairly and without leading the person.

Related: Witness Statement, Open Question
Open Question

A question beginning with words such as what, how, or describe, which invites a full account rather than a yes or no answer.

Related: Interview, Leading Question
Leading Question

A question that suggests the answer the questioner expects, risking contaminated or unreliable evidence and therefore generally avoided in investigations.

Related: Open Question, Interview
Investigation Report

A formal document setting out the incident background, findings, causes, conclusions, and recommended actions, written for the audience who must act on it.

Related: Corrective Action, Recommendation
Recommendation

A proposed action arising from investigation findings, ideally specific, assigned to a responsible person, and given a realistic completion date.

Related: Corrective Action, Investigation Report
RIDDOR

The UK Reporting of Injuries, Diseases and Dangerous Occurrences Regulations, which require certain serious incidents to be reported to the enforcing authority within set timescales.

Related: Reportable Incident, Enforcing Authority
Reportable Incident

An incident of a type and severity that legislation requires to be notified to the relevant authority, such as a specified injury or dangerous occurrence.

Related: RIDDOR, Enforcing Authority
Enforcing Authority

The body responsible for regulating health and safety in a workplace, such as the Health and Safety Executive or a local authority in the UK.

Related: RIDDOR, Reportable Incident
Accident Triangle

A model showing that many minor incidents and near misses occur for each serious injury, so investigating small events can prevent larger ones.

Related: Near Miss, Incident
Incident Rate

A measure of incidents over a period, usually expressed per 100,000 hours worked or per 1,000 workers, allowing comparison between sites or over time.

Related: Accident Triangle, Trend Analysis
Trend Analysis

Examining incident data over time to identify patterns in type, location, or cause, which can reveal emerging risks that single events do not show.

Related: Incident Rate, Corrective Action
Lessons Learned

The knowledge gained from an investigation that is shared across the organisation so that other teams can prevent similar incidents.

Related: Investigation Report, Corrective Action
Investigation Team

The group appointed to conduct an investigation, chosen for relevant technical, operational, and impartial expertise, often including a worker representative.

Related: Investigation Report, Interview
Terms of Reference

The written scope of an investigation, defining its purpose, boundaries, team, timescales, and the level of detail required.

Related: Investigation Team, Investigation Report