I85PREP
⌘ K
NEBOSH Incident Investigation study materials
NEBOSH Incident Investigation study resources

NEBOSH Incident Investigation practice questions

One question at a time. Build your NEBOSH Incident Investigation understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Incident investigation (content domains not stated by source)

Under the '5 Whys' technique, what is the primary purpose of repeatedly asking 'why' after an incident?

  1. To determine the legal reporting deadline for the regulator
  2. To assign individual blame to the person closest to the event
  3. To progress from the immediate cause towards underlying management system failures Correct answer.
  4. To calculate the financial cost of the incident

Explanation

The 5 Whys method drills past the immediate technical and human causes toward the underlying or root causes, which are typically failures in management systems and controls. Its purpose is corrective learning, not blame allocation or cost calculation.

Question 2Incident investigation (content domains not stated by source)

Which term describes the sequence of events, each dependent on the previous one, that led directly to a loss event?

  1. The safety culture maturity model
  2. The risk matrix
  3. The causal chain Correct answer.
  4. The hierarchy of control

Explanation

An incident is best modelled as a chain or sequence of linked events and conditions, each enabling the next, culminating in the loss. Breaking any link in that chain prevents the outcome, which is why investigation targets the whole sequence.

Question 3Incident investigation (content domains not stated by source)

Which of the following best describes an 'unsafe act' as a causal factor in an incident?

  1. A deviation from a required safe procedure by a person at the workplace Correct answer.
  2. A statutory requirement imposed on the employer
  3. A latent defect in a management system that lies dormant for years
  4. A naturally occurring event with no human involvement

Explanation

Unsafe acts are the observable behavioural deviations from required safe practice, such as bypassing a guard or failing to isolate energy. They are distinguished from unsafe conditions and from latent organisational failures.

Question 4Incident investigation (content domains not stated by source)

What is the main distinction between an 'incident' and an 'accident' in investigation terminology?

  1. An incident involves only property damage, while an accident involves only personal injury
  2. An incident includes near misses and undesired events, while an accident is an incident that produced actual injury or damage Correct answer.
  3. An accident is investigated internally, while an incident requires a criminal prosecution
  4. An accident is always reportable to the regulator, while an incident never is

Explanation

Incident is the broader term covering any undesired event, including near misses with no harm, whereas accident denotes an incident that resulted in actual injury, ill health or damage. Using the wider term encourages reporting and investigation of near misses.

Question 5Incident investigation (content domains not stated by source)

In an investigation, what is the role of a 'witness statement' taken shortly after the event?

  1. To document the disciplinary decision taken against the witness
  2. To record the investigator's conclusions about root causes
  3. To replace the need for physical evidence at the scene
  4. To capture the witness's own recollection of what they saw and did while memory is fresh Correct answer.

Explanation

Witness statements preserve first-hand recollection before memory degrades or is influenced by discussion with others. They are evidence gathered by the investigator, not a vehicle for the investigator's conclusions or disciplinary outcomes.

Question 6Incident investigation (content domains not stated by source)

Which of the following is a reactive (lagging) performance indicator in the context of incident investigation?

  1. The percentage of staff who completed induction training
  2. The percentage of staff trained in near-miss reporting
  3. The number of lost-time injuries recorded in the period Correct answer.
  4. The frequency of planned safety inspections completed

Explanation

Reactive indicators measure outcomes that have already occurred, such as injuries, incidents and lost time. Lost-time injury counts are therefore reactive. Training completion, including training in near-miss reporting, and inspection frequency are proactive (leading) indicators because they measure preventive activity.

Question 7Incident investigation (content domains not stated by source)

What is the principal purpose of securing and preserving the incident scene as soon as possible?

  1. To enable the regulator to issue a fine on the spot
  2. To give the media an authorised viewing area
  3. To allow production to resume without any delay
  4. To prevent loss or alteration of physical evidence before it can be recorded and collected Correct answer.

Explanation

The scene contains perishable evidence such as positions, damage patterns and environmental conditions that can be destroyed by rescue, clean-up or resumed work. Securing the scene preserves that evidence for accurate reconstruction.

Question 8Incident investigation (content domains not stated by source)

Which investigation level is most appropriate for a minor first-aid-only injury with no significant hazard potential?

  1. No investigation, because no reportable injury occurred
  2. A proportionate internal investigation sufficient to identify immediate and underlying causes Correct answer.
  3. A criminal investigation by the police
  4. A full external investigation by the national regulator

Explanation

Investigation should be proportionate to the actual and potential severity of the event. A minor event is still investigated to learn lessons, but the depth and resources should be scaled accordingly rather than escalated to external authorities.

Question 9Incident investigation (content domains not stated by source)

A worker slips on an oil patch and injures their wrist. Which of the following is the immediate (direct) cause?

  1. Poor safety culture in the organisation
  2. A weak maintenance schedule for machinery
  3. Absence of a management review process
  4. Oil on the floor where the worker was walking Correct answer.

Explanation

Immediate causes are the direct circumstances and acts at the point of the event, such as the oil on the floor. Management system weaknesses like maintenance scheduling or culture are underlying causes that allowed the condition to exist.

Question 10Incident investigation (content domains not stated by source)

During an investigation, an investigator finds that a machine guard was removed. What is the most appropriate next step to establish causation?

  1. Recommend a new guard without examining the reasons for removal
  2. Determine why the guard was removed and why the system permitted it to remain off Correct answer.
  3. Immediately discipline the operator and close the investigation
  4. Record the finding as an unsafe act and take no further action

Explanation

Effective investigation goes beyond the observed deviation to ask why the guard was removed and why controls failed to detect or prevent this. This reveals underlying causes such as production pressure, design faults or inadequate supervision.

Question 11Incident investigation (content domains not stated by source)

Which of the following best describes a 'latent' cause in an incident investigation?

  1. An error made by the injured person at the moment of the event
  2. The emergency response that followed the event
  3. The immediate physical condition that triggered the event
  4. A hidden organisational weakness that lies dormant and only contributes to loss when combined with other factors Correct answer.

Explanation

Latent causes are dormant weaknesses in design, management or decision-making that may exist for a long time before combining with active failures to produce an incident. They are typically organisational rather than individual.

Question 12Incident investigation (content domains not stated by source)

Why is it important to interview witnesses separately rather than in a group?

  1. To allow witnesses to agree a common version of events
  2. To satisfy a legal requirement that only one person may be present
  3. To prevent one account from influencing or contaminating another witness's recollection Correct answer.
  4. To reduce the total time spent on interviews

Explanation

Group interviews allow dominant personalities or shared assumptions to distort individual recollections. Separate interviews preserve the independence of each account, which improves the reliability of the evidence gathered.

Question 13Incident investigation (content domains not stated by source)

Which document should be used to record the actions, responsibilities and deadlines arising from an investigation?

  1. The risk assessment for the whole site
  2. The original incident report form only
  3. The witness statement file
  4. An action plan or tracking register with owners and target dates Correct answer.

Explanation

Recommendations only prevent recurrence if they are tracked to completion. An action plan assigns each action to a named owner with a target date and allows progress to be monitored and closed out.

Question 14Incident investigation (content domains not stated by source)

A near miss occurs when a load falls from a crane but no one is hurt. Why should it be investigated with rigour similar to an injury?

  1. It has no value unless someone is injured
  2. It reveals the same failure mechanisms that could cause serious harm next time Correct answer.
  3. It proves that the crane operator was negligent
  4. It is automatically reportable to the regulator as a dangerous occurrence

Explanation

Near misses share the same causal pathways as accidents; only chance determined that no harm occurred. Investigating them allows controls to be strengthened before the same failure produces serious injury.

Question 15Incident investigation (content domains not stated by source)

Which of the following is an example of documentary evidence that an investigator should collect?

  1. Maintenance records, permits to work and training certificates Correct answer.
  2. The positions of debris at the scene
  3. The investigator's personal opinion of the supervisor
  4. Verbal accounts given by witnesses

Explanation

Documentary evidence consists of records such as maintenance logs, permits, training and inspection records that show what the system required and whether it was followed. Physical positions and witness accounts are different evidence types.

Question 16Incident investigation (content domains not stated by source)

What does the 'hierarchy of control' concept contribute to the recommendations stage of an investigation?

  1. It determines which witnesses should be interviewed first
  2. It ranks incidents by their financial cost
  3. It sets the legal deadline for reporting the incident
  4. It guides selection of the most reliable control, favouring elimination and engineering over reliance on behaviour Correct answer.

Explanation

When recommending corrective actions, the hierarchy reminds investigators to prefer elimination, substitution and engineering controls over administrative and PPE measures, because higher-order controls are less dependent on human behaviour and therefore more reliable.

Question 17Incident investigation (content domains not stated by source)

An investigator suspects that a supervisor falsified a permit to work. What is the most appropriate approach?

  1. Assume the permit is genuine because it is signed
  2. Destroy the permit to avoid embarrassment
  3. Confront the supervisor publicly and demand an admission
  4. Preserve the original document as evidence and gather corroborating records before drawing conclusions Correct answer.

Explanation

Potential documentary fraud requires preservation of the original, controlled handling and corroboration from other records such as logs and interviews. Conclusions should follow the evidence, not precede it.

Question 18Incident investigation (content domains not stated by source)

Which of the following best explains why an investigation report should distinguish clearly between 'findings' and 'recommendations'?

  1. Findings state what the evidence establishes, while recommendations state what should be done to prevent recurrence Correct answer.
  2. Findings are confidential while recommendations are public
  3. Findings are optional while recommendations are mandatory
  4. Findings are written by witnesses while recommendations are written by the regulator

Explanation

Separating findings from recommendations keeps the report logical and auditable: findings are evidence-based conclusions about causation, while recommendations are proposed actions derived from them. This separation also allows recommendations to be reviewed and accepted on their merits.

Question 19Incident investigation (content domains not stated by source)

What is the purpose of establishing terms of reference at the start of an investigation?

  1. To identify the person to be disciplined
  2. To define the scope, objectives, resources and authority of the investigation team Correct answer.
  3. To set the insurance claim value
  4. To replace the need for evidence collection

Explanation

Terms of reference set out clearly what the investigation will and will not cover, its objectives, the team's authority and the resources and timescale. This prevents scope creep and manages expectations of stakeholders.

Question 20Incident investigation (content domains not stated by source)

An investigator finds that a worker took a shortcut because a formal procedure was impractical to follow. Which conclusion best reflects good investigation practice?

  1. The shortcut should be accepted as normal practice
  2. The procedure's design and its mismatch with the task are underlying causes requiring correction Correct answer.
  3. The worker alone is responsible and no system change is needed
  4. The procedure should be ignored because it was impractical

Explanation

When procedures are routinely bypassed because they do not fit the reality of the task, the design of the procedure and the management system that produced it are underlying causes. Corrective action should address the mismatch rather than blame the individual alone.

Question 21Incident investigation (content domains not stated by source)

Which of the following best describes the role of an 'expert witness' in a formal incident investigation?

  1. To provide independent, evidence-based opinion within their field of expertise to assist the investigation Correct answer.
  2. To decide the final legal liability of the parties
  3. To advocate for the employer's position
  4. To represent the injured worker's interests

Explanation

An expert witness provides independent technical opinion within their competence to help the investigation understand complex evidence. Their duty is to the investigation and the facts, not to any party's interests.

Question 22Incident investigation (content domains not stated by source)

An investigation team finds that an incident had multiple contributing causes operating together rather than a single root cause. Which approach best reflects this finding?

  1. Select one cause arbitrarily to simplify the report
  2. Conclude that no root cause exists and close the case
  3. Present a causal network of contributing factors and target the most significant and controllable ones Correct answer.
  4. Recommend only training for all staff

Explanation

Many incidents arise from interacting technical, human and organisational factors rather than one root cause. Presenting a causal network and prioritising the most significant and controllable factors gives a realistic basis for corrective action.

Question 23Incident investigation (content domains not stated by source)

Why should an investigator avoid relying solely on witness interviews to establish causation?

  1. Witnesses are always dishonest
  2. Human memory is fallible and can be influenced by hindsight, stress and discussion with others Correct answer.
  3. Interviews take too long to conduct
  4. Interviews are not permitted in investigations

Explanation

Memory is reconstructive and can be distorted by stress, time, leading questions and post-event discussion. Corroboration with physical and documentary evidence is therefore essential to reliable causal conclusions.

Question 24Incident investigation (content domains not stated by source)

A regulator has served a prohibition notice following an incident. What is the most appropriate relationship between the internal investigation and the regulator's enquiries?

  1. Refuse to share any information with the regulator
  2. Delay the internal investigation until the regulator has finished
  3. Cooperate fully and preserve evidence, while ensuring the internal investigation remains independent and evidence-based Correct answer.
  4. Destroy records that could be incriminating

Explanation

The organisation should cooperate with the regulator and preserve all evidence, while conducting its own investigation to a sound evidential standard. Destroying records or obstructing enquiries is unlawful and undermines both processes.

Question 25Incident investigation (content domains not stated by source)

Which of the following best describes the purpose of the 'change analysis' technique in incident investigation?

  1. To decide who authorised the change
  2. To list all future changes planned for the site
  3. To compare conditions before and after a change to identify what differed and contributed to the event Correct answer.
  4. To record the financial cost of the change

Explanation

Change analysis examines what was different from normal or previous conditions, such as new personnel, equipment or procedures, because unplanned or poorly managed change is a frequent contributor to incidents.

Question 26Incident investigation (content domains not stated by source)

Which investigation technique builds a timeline of events by repeatedly asking 'why' until the underlying organisational weakness is exposed?

  1. Event tree analysis
  2. Fault tree analysis
  3. Barrier analysis
  4. Five whys analysis Correct answer.

Explanation

Five whys is a simple causal-laddering technique where each answer to 'why' becomes the next question, driving the investigator from the immediate event toward management-system weaknesses. It is iterative and linear rather than a quantified logic diagram.

Question 27Incident investigation (content domains not stated by source)

In incident investigation terminology, what is the 'top event' in a fault tree?

  1. The first witness statement taken at the scene
  2. The most recent near miss recorded at the site
  3. The highest-risk activity identified in the risk assessment
  4. The undesired incident being analysed, placed at the apex of the tree Correct answer.

Explanation

A fault tree is drawn downward from a single undesired outcome, called the top event, and the logic gates show which combinations of lower-level faults could produce it. Every branch is developed by asking what is necessary for the event above to occur.

Question 28Incident investigation (content domains not stated by source)

Which sequence correctly describes the typical stages of an incident investigation?

  1. Analyse causes, then secure the scene, then gather evidence, then report
  2. Secure the scene, then gather evidence, then analyse causes, then report and recommend actions Correct answer.
  3. Gather evidence, then report, then secure the scene, then implement recommendations
  4. Report findings, then secure the scene, then gather evidence, then analyse causes

Explanation

The logical order is to preserve the scene first so that perishable evidence is not lost, then collect evidence, analyse it to establish causes, and finally report with recommendations. Reporting before analysis would produce unsupported conclusions.

Question 29Incident investigation (content domains not stated by source)

Which of the following is a 'human error' category used when classifying immediate causes of an incident?

  1. Inadequate supervision
  2. Absent permit-to-work system
  3. Poor maintenance regime
  4. Slip or lapse in a routine task Correct answer.

Explanation

A slip or lapse is a skill-based human error in which an intended action is executed incorrectly or forgotten during a routine task. The other options are organisational or management-system deficiencies rather than individual error types.

Question 30Incident investigation (content domains not stated by source)

What is the main purpose of taking photographs at an incident scene before anything is moved?

  1. To satisfy the insurance company's claim documentation only
  2. To provide a permanent visual record of conditions that cannot be recreated later Correct answer.
  3. To replace the need for written witness statements
  4. To identify which worker should be disciplined

Explanation

Photographs capture the layout, damage and environmental conditions at the time of the incident, preserving perishable evidence that will be altered once cleanup or recovery begins. They complement rather than replace other evidence such as statements and measurements.

Question 31Incident investigation (content domains not stated by source)

Which of the following is a 'lagging' indicator that an organisation might track to evaluate its incident investigation performance?

  1. Percentage of investigation recommendations closed on time Correct answer.
  2. Number of toolbox talks delivered
  3. Number of safety observations completed each month
  4. Percentage of workers trained in hazard reporting

Explanation

The proportion of recommendations closed by their due date measures outcomes after investigations have occurred, making it a lagging indicator of investigation effectiveness. The other options count proactive activities carried out before any incident.

Question 32Incident investigation (content domains not stated by source)

Why should an investigator record the environmental conditions at the scene, such as lighting, temperature and floor surface?

  1. Because environmental factors can be contributing causes that affect human performance and equipment reliability Correct answer.
  2. Because it proves the worker was negligent
  3. Because it helps decide which contractor to blame
  4. Because regulations require a weather report for every incident

Explanation

Poor lighting, heat, noise or a slippery surface can degrade perception and performance and are legitimate contributing causes. Recording them allows the investigation to address conditions rather than only individual behaviour.

Question 33Incident investigation (content domains not stated by source)

What does the term 'chain of custody' mean for physical evidence collected during an incident investigation?

  1. The order in which recommendations are implemented
  2. The hierarchy of controls applied to a hazard
  3. The sequence of interviews conducted with witnesses
  4. The documented record of who handled, moved and stored an item from collection onward Correct answer.

Explanation

Chain of custody is a chronological record showing every person who has had control of an item and when, so its integrity can be demonstrated if the evidence is challenged. Gaps in the record can undermine the evidential value of the item.

Question 34Incident investigation (content domains not stated by source)

An investigator is reconstructing events from a damaged machine and finds that the emergency stop was functional but the guard interlock had been bypassed. Which conclusion is best supported?

  1. No further investigation is required because the stop worked
  2. The bypassed interlock is a credible contributing cause that warrants further analysis Correct answer.
  3. The emergency stop caused the incident
  4. The machine design is proven to be inherently safe

Explanation

A defeated interlock removes a designed barrier and is a plausible contributing cause, but the investigator should still establish why it was bypassed and whether other factors applied. The finding supports further analysis rather than a premature conclusion.

Question 35Incident investigation (content domains not stated by source)

During an interview, a witness says 'I think the valve was open, but I was on the other side of the plant.' How should the investigator treat this information?

  1. Discard it entirely because it is uncertain
  2. Treat it as a confession of responsibility
  3. Record it as established fact because the witness was present
  4. Record it as an opinion with limited reliability and seek corroboration from other evidence Correct answer.

Explanation

The witness has given an estimate rather than a direct observation, so the statement should be recorded accurately but weighted as low-reliability opinion. Corroboration from physical evidence or other witnesses is needed before it supports a causal conclusion.

Question 36Incident investigation (content domains not stated by source)

An investigation team must decide whether to use a structured technique such as fault tree analysis. Which factor most strongly justifies that choice?

  1. The incident is complex with several interacting failures and the team needs to test causal logic systematically Correct answer.
  2. The incident happened on a Friday afternoon
  3. The site manager prefers diagrams to written reports
  4. The team has only one hour available for the whole investigation

Explanation

Structured deductive techniques are most valuable where multiple failures and control interactions make intuitive reasoning unreliable, because they force the team to test each causal pathway explicitly. Simplicity of circumstances or severe time pressure would argue against a resource-intensive method.

Question 37Incident investigation (content domains not stated by source)

What distinguishes a 'root cause' from an 'immediate cause' in an incident investigation?

  1. A root cause is the first event in the timeline
  2. A root cause is always a deliberate act by a worker
  3. A root cause is the underlying system deficiency that allowed the immediate cause to exist Correct answer.
  4. A root cause is the most expensive factor to correct

Explanation

The immediate cause is the unsafe act or condition present at the moment of the incident, while the root cause is the underlying management or design deficiency that permitted it. Correcting only the immediate cause leaves the system weakness in place.

Question 38Incident investigation (content domains not stated by source)

An investigator wants to determine whether a procedure was actually followed in practice rather than as written. Which evidence source is most useful?

  1. Direct observation of the task and interviews with operators who perform it routinely Correct answer.
  2. The organisation's health and safety policy statement
  3. The procedure's revision history
  4. The controlled copy of the procedure held in the document management system

Explanation

Work-as-done can differ substantially from work-as-imagined, so observing the task and talking to operators reveals actual practice. Documented procedures show intent, not what happens at the workplace.

Question 39Incident investigation (content domains not stated by source)

A witness becomes distressed and reluctant to continue an interview. What is the most appropriate investigator response?

  1. Threaten disciplinary action for non-cooperation
  2. Continue firmly to obtain the full account before the witness leaves
  3. Pause, acknowledge the distress, and offer a break or to reconvene later Correct answer.
  4. End the investigation because the witness is unreliable

Explanation

Witness welfare affects both the quality and the ethics of the interview, and a distressed witness gives poor recall. Pausing or rescheduling preserves rapport and the reliability of the account.

Question 40Incident investigation (content domains not stated by source)

Which of the following best describes a 'contributing factor' in an incident investigation?

  1. A legal finding of fault against an individual
  2. A condition or action that increased the likelihood or severity of the incident but was not sufficient on its own Correct answer.
  3. An irrelevant detail recorded for completeness
  4. The single factor that, if removed, would have prevented the incident entirely

Explanation

Contributing factors are the multiple conditions and actions that together shaped the likelihood and outcome of an incident, and each usually needs addressing. They are distinguished from a sufficient or root cause that alone explains the event.

Question 41Incident investigation (content domains not stated by source)

An investigation finds that a worker used the wrong chemical because two containers had similar labels. Which recommendation best addresses the underlying cause?

  1. Display a poster reminding staff to read labels
  2. Record the error in the worker's personnel file
  3. Introduce a labelling and segregation system that makes containers clearly distinguishable Correct answer.
  4. Retrain the worker on chemical hazards

Explanation

The error arose from a design weakness that made the wrong choice likely, so the more reliable correction is to redesign labelling and storage to remove the opportunity for confusion. Retraining and reminders rely on individual vigilance and are weaker controls.

Question 42Incident investigation (content domains not stated by source)

Why should an investigator distinguish between evidence and inference when writing the investigation report?

  1. Because inferences are only permitted in legal proceedings
  2. Because inferences are always incorrect and should be omitted
  3. Because readers must be able to see what was established and what was reasoned from it Correct answer.
  4. Because evidence is only relevant if it is physical

Explanation

Separating evidence from inference allows readers to judge the strength of the conclusions and to see where judgement was applied. Presenting inference as fact can mislead decision-makers and undermine the report if challenged.

Question 43Incident investigation (content domains not stated by source)

A team is investigating an incident where an experienced operator made an error during a high-workload period. Which analytical perspective is most useful?

  1. Checking whether the operator had any previous disciplinary record
  2. Assuming the operator was careless and closing the case
  3. Reviewing only the operator's training certificates
  4. Examining workload, staffing, task design and interface factors that shaped the error Correct answer.

Explanation

Errors by experienced staff in demanding conditions often reflect system factors such as workload, staffing and interface design rather than carelessness. Examining those conditions identifies controls that can prevent recurrence.

Question 44Incident investigation (content domains not stated by source)

What is the main benefit of interviewing witnesses as soon as practicable after an incident?

  1. It allows the investigator to decide guilt before gathering facts
  2. It guarantees that all witnesses will give identical accounts
  3. It removes the need to collect physical evidence
  4. It reduces memory decay and the influence of discussion with others Correct answer.

Explanation

Memory fades quickly and can be reshaped by conversations with colleagues or media reports, so prompt interviews improve accuracy. Promptness does not guarantee consistency, and accounts will still legitimately vary.

Question 45Incident investigation (content domains not stated by source)

An investigator is asked to investigate an incident that may lead to a criminal prosecution. Which approach best protects the integrity of the investigation?

  1. Interview suspects without caution to obtain information quickly
  2. Share witness statements freely with all staff to encourage transparency
  3. Follow the organisation's investigation procedure while preserving evidence and seeking legal advice on disclosure Correct answer.
  4. Destroy draft notes once the final report is written

Explanation

Where prosecution is possible, the investigation must be conducted to a defensible standard, with evidence preserved and legal advice taken on obligations and disclosure. This protects both the organisation and the individuals involved.

Question 46Incident investigation (content domains not stated by source)

Which of the following best describes the purpose of 'change analysis' when applied to an incident?

  1. Measuring the change in injury rates after recommendations
  2. Identifying what was different from normal or expected conditions before the incident Correct answer.
  3. Comparing the incident with similar events in other organisations
  4. Analysing how the organisation's budget changed over the year

Explanation

Change analysis looks for deviations from the normal or expected state, such as new equipment, altered procedures or unusual staffing, because such changes often introduce the conditions that produce incidents. It focuses on differences from the baseline rather than benchmarking or trend measurement.

Question 47Incident investigation (content domains not stated by source)

An investigation identifies a systemic weakness in how contractors are inducted. Which action best reflects an effective 'lessons learned' process?

  1. Sending the report only to the contractor involved
  2. Communicating the finding and revised induction requirements to all sites and monitoring implementation Correct answer.
  3. Filing the report and taking no further action because the incident was minor
  4. Waiting for the next similar incident to confirm the pattern

Explanation

Lessons learned only add value when findings are disseminated beyond the site where the incident occurred and the resulting actions are implemented and monitored. This prevents other parts of the organisation repeating the same weakness.

Question 48Incident investigation (content domains not stated by source)

Two investigators disagree about whether a supervisor's decision was a cause or merely a background condition. Which approach best resolves the disagreement?

  1. Test the decision against the evidence and the causal criteria agreed in the terms of reference Correct answer.
  2. Ask the supervisor to decide how their action should be classified
  3. Exclude the supervisor's decision from the report to avoid conflict
  4. Accept the view of the more senior investigator without further discussion

Explanation

Disagreements about causation should be resolved by testing the disputed factor against evidence and the causal criteria set out at the outset. This keeps the analysis transparent and defensible rather than dependent on seniority or avoidance.

Question 49Incident investigation (content domains not stated by source)

An investigator finds that a permit was signed off without a site visit, and the same practice appears in several recent permits. What does this pattern most strongly suggest?

  1. That the incident was unavoidable
  2. That permits are unnecessary for this type of work
  3. An isolated lapse by one individual that needs no wider action
  4. A normalised practice indicating a system-level weakness in permit control Correct answer.

Explanation

Repeated deviations across several permits indicate that the shortcut has become accepted practice, pointing to a system-level weakness in how permits are verified and supervised. Treating it as an isolated lapse would leave the underlying culture and control failure intact.

Question 50Incident investigation (content domains not stated by source)

Why is it important for an investigation report to state the limitations of the evidence, such as missing records or unavailable witnesses?

  1. To make the report longer and appear more thorough
  2. To shift responsibility onto the witnesses who were unavailable
  3. To avoid the need to make any recommendations
  4. So that decision-makers understand the confidence they can place in the conclusions Correct answer.

Explanation

Stating limitations allows readers to weigh the conclusions appropriately and to understand where further work may be needed. It is an issue of transparency and analytical honesty, not of length or blame.