Mastering Business Excellence · Health, Safety, and Environment (HSE)

Incident Investigation Professional

Incident Investigation Professional trains supervisors and HSE staff to secure a scene, gather evidence, interview witnesses and find true root causes.

Register Now opens this course on the Blue Ocean Academy website in a new tab.

Incident Investigation Professional course
  • Course codeIIP
  • LevelProfessional
  • Learning time30 hours
  • Modules21 modules
  • FormatSelf-paced online
  • CredentialMBE credential

About this course

Why it matters

Three near-identical incidents in two years is not bad luck. It is the signature of investigations that closed on operator error and a corrective action that retrained the person instead of fixing the system.

Companies that break the pattern treat investigation as a discipline with evidence rules, interview technique and causation models of its own. The program teaches that discipline to the supervisors who arrive first and the HSE staff who lead the inquiry, so findings land on latent conditions rather than on the nearest worker.

How it runs for your organization

Organizations deploy it under a corporate license as 30 hours of self-paced online learning on the Blue Ocean learning platform, accessible by web and mobile app, with an administrator dashboard that shows enrollment, progress and completion across the cohort.

Participants practice the perimeter, logging and chain of custody routines, the four Ps evidence framework and the cognitive interview method on scenarios, then apply them to the next event on their own site. A digital, verifiable MBE credential is awarded to each person who completes the modules and the assessments.

What you will learn

  • Classify injuries, near misses and dangerous occurrences and explain why near-miss data matters
  • Design a reporting system people trust and write SMART corrective actions with verified effectiveness
  • Identify reportable events, notification timelines and the legal status of the investigation record
  • Apply domino, Swiss cheese, energy-barrier and systems models to a real event
  • Scale an investigation to the incident, lead the team and write a defensible report
  • Secure a scene, control the perimeter and log evidence under chain of custody
  • Conduct cognitive interviews that avoid leading questions and witness contamination
  • Separate immediate, underlying and root causes using 5 Whys, fishbone, fault tree and bow-tie methods

Skills you will build

  • Near-miss classification
  • Reporting system design
  • Causation model selection
  • Scene preservation
  • Evidence logging
  • Cognitive interviewing
  • Root cause layering
  • Fishbone analysis

Who this course is for

The first hour after an incident belongs to whoever is on shift, which is why operations and shift supervisors belong in the cohort alongside the HSE managers and advisors who will lead the formal inquiry. Maintenance and reliability engineers bring equipment failures into the same method, and quality or compliance officers connect findings to the corrective action system they already administer.

HR and employee relations staff learn how a fair, evidence-led process protects both the organization and the individual. Leaders accountable for closing actions see what a true root cause looks like before they sign off on one. Mixed cohorts work well here because an investigation team is itself mixed.

Course outline

The 21 modules follow an investigation from first report to organizational learning. Modules one to three set purpose, reporting culture and notification duties. Module four explains causation models, and modules five to eight cover the fieldwork: scaling the inquiry, securing the scene, gathering evidence and interviewing witnesses.

Modules nine to thirteen are the analytical toolkit: root cause fundamentals, fishbone and 5 Whys, event and fault trees, bow-tie analysis and digital tools. Modules fourteen to eighteen turn findings into change: human and organizational factors, corrective actions, report writing, lessons learned and a learning culture. Modules nineteen and twenty study landmark disasters and emerging methods, and the capstone integrates the whole practice.

21 modules · 84 topics

Module 1Introduction to Incident Investigation
  • What Counts as an Incident
  • The Purpose: Prevention, Not Blame
  • The Business and Human Case for Investigation
  • The Role of the Investigator
Module 2Incident Types and Reporting Culture
  • Classifying Incidents: Injuries, Near Misses, and Dangerous Occurrences
  • The Accident Iceberg and the Value of Near-Miss Data
  • Barriers to Reporting
  • Designing a Reporting System People Trust
Module 3The Legal and Regulatory Landscape
  • Duty of Care and the Regulatory Rationale
  • Key Frameworks: OSHA, HSE, RIDDOR, and ISO 45001
  • Reportable Events and Notification Timelines
  • Legal Privilege, Liability, and the Investigation Record
Module 4Accident Causation Theories and Safety Science
  • Early Models: Domino Theory and the Heinrich Ratio
  • The Swiss Cheese Model and Latent Conditions
  • Energy-Barrier and Epidemiological Models
  • Systems Thinking and Complexity in Modern Safety
Module 5The Investigation Process
  • The Investigation Lifecycle at a Glance
  • Notification, Triage, and Response
  • Scaling the Investigation to the Incident
  • Assembling and Leading the Team
Module 6Securing and Documenting the Scene
  • Making the Scene Safe First
  • Establishing and Controlling the Perimeter
  • Photography, Video, and Sketching the Scene
  • Chain of Custody and Evidence Logging
Module 7Gathering Evidence
  • The Four Ps: People, Parts, Position, Paper
  • Physical and Forensic Evidence
  • Documentary and Electronic Records
  • Environmental and Contextual Data
Module 8Interviewing Witnesses
  • The Psychology of Witness Memory
  • Planning and Sequencing Interviews
  • The Cognitive Interview Technique
  • Avoiding Leading Questions and Bias
Module 9Root Cause Analysis Fundamentals
  • Symptoms, Causes, and Root Causes
  • Immediate, Underlying, and Root Cause Layers
  • The Danger of Stopping at Human Error
  • Criteria for a True Root Cause
Module 10The 5 Whys and Cause-and-Effect Methods
  • How and When to Use the 5 Whys
  • Common Pitfalls of the 5 Whys
  • The Fishbone (Ishikawa) Diagram
  • Categorizing Causes: The 6 Ms and Beyond
Module 11Fault Tree and Event Tree Analysis
  • Deductive versus Inductive Analysis
  • Constructing a Fault Tree
  • Logic Gates and Boolean Reasoning
  • Event Trees and Consequence Analysis
Module 12Barrier and Bow-Tie Analysis
  • The Barrier Concept and Lines of Defense
  • Anatomy of the Bow-Tie Diagram
  • Threats, Top Events, and Consequences
  • Identifying Failed and Missing Barriers
Module 13Data-Driven and Digital Investigation Tools
  • Structured RCA Platforms: TapRooT, Apollo, and PROACT
  • Incident Management and Reporting Software
  • Timelining and Visualization Tools
  • Data Analytics and Trend Detection
Module 14Human and Organizational Factors
  • The Myth of the Careless Worker
  • Performance-Shaping Factors and Local Rationality
  • Skill-, Rule-, and Knowledge-Based Errors
  • Organizational Drift and Normalization of Deviance
Module 15Corrective and Preventive Actions
  • From Root Cause to Corrective Action
  • The Hierarchy of Controls
  • SMART Actions and Ownership
  • Verifying Effectiveness and Sustainability
Module 16Writing the Investigation Report
  • Purpose and Audiences of the Report
  • Structuring the Report
  • Presenting Findings, Facts, and Conclusions
  • Writing Clearly and Defensibly
Module 17Sharing Lessons Learned
  • Why Lessons Fail to Stick
  • Safety Alerts, Bulletins, and Briefings
  • Feeding Findings into Risk Assessments and Procedures
  • Cross-Site and Industry Knowledge Sharing
Module 18Building an Investigation and Learning Culture
  • The Characteristics of a Learning Organization
  • Leadership Commitment and Psychological Safety
  • Just Culture in Practice
  • Competence, Training, and Investigator Development
Module 19Learning from Catastrophe: Landmark Case Studies
  • Piper Alpha and the Birth of the Safety Case
  • BP Texas City and Process Safety Blindness
  • Deepwater Horizon: Cascading Barrier Failures
  • Bhopal and Columbia: Organizational Lessons
Module 20Emerging Frontiers in Incident Investigation
  • From Safety-I to Safety-II and Learning from Success
  • Artificial Intelligence and Machine Learning in Investigation
  • Predictive Analytics and Leading Indicators
  • Wearables, Sensors, and Real-Time Data
Module 21The Professional Investigator's Practice: A Capstone
  • The Investigator's Competence Framework
  • Running an End-to-End Investigation: An Integrated Walkthrough
  • Ethics, Independence, and Professional Judgment
  • Continuous Improvement of the Investigation System

Frequently asked questions

Why does the program begin with reporting culture before investigation technique?

Because an investigation can only examine what gets reported. Module two explains the accident iceberg, why near-miss data is worth more than injury statistics, what stops people from reporting, and how to design a reporting system that staff trust. A site that fixes reporting first gives its investigators far more to learn from and fewer surprises.

What does the cognitive interview method involve?

Module eight covers it in full. Participants learn how witness memory works and degrades, how to plan and sequence interviews so accounts are not contaminated by each other, how the cognitive interview draws out detail through context reinstatement and free recall, and how to recognize and avoid the leading questions that quietly steer a witness toward the interviewer's theory.

How does it stop investigators settling on human error?

Three modules address it. Module four introduces the Swiss cheese model, latent conditions and systems views of safety, which give investigators language for what sits behind an unsafe act. Module nine sets out the immediate, underlying and root cause layers and gives criteria a finding must meet before it counts as a root cause. Module fourteen then examines performance-shaping factors, local rationality and organizational drift.

Which evidence types does the four Ps framework cover?

People, parts, position and paper. Module seven uses that structure to walk through physical and forensic evidence, documentary and electronic records, and environmental and contextual data such as lighting, weather and workload. Module six precedes it with making the scene safe, controlling the perimeter, photographing and sketching, and keeping a chain of custody for everything collected.

Can maintenance engineers use the same methods for equipment failures?

Yes. The causation models, the evidence framework and the root cause tools apply equally to a conveyor failure or a near miss on a walkway. Module ten covers the 5 Whys with its common pitfalls, the fishbone diagram, and categorizing causes through the 6 Ms, which reliability engineers often recognize from their own problem-solving work, and module eleven adds fault tree and event tree analysis.

Does the program require participants to study together or on a schedule?

No. The 30 hours are self-paced on the Blue Ocean learning platform, so each investigator works through the modules on web or mobile at a pace that suits shift patterns. The corporate license places everyone on one administrator dashboard, where the HSE manager can see enrollment, progress and completion without arranging group sessions.

How do individual learners register for this course?

Use the Register Now button on this page. It opens Incident Investigation Professional on the Blue Ocean Academy website, where individual learners can enroll directly.

How does a corporate license for this course work?

Your organization licenses seats for a cohort or a whole team. Participants study the self-paced modules on the Blue Ocean learning platform, on web or mobile, and your administrator follows enrollment, progress and completion on a dashboard.

Can we start with a pilot cohort before a wider rollout?

Yes. A pilot cohort in one department is a practical first step. Use the corporate license form, and a program advisor will map the relevant courses and license options to your teams.

Ready to get started?

Request a corporate license so every shift supervisor investigates to the same standard, or ask about a pilot cohort for one plant.

Register Now opens this course on the Blue Ocean Academy website in a new tab.

More courses in Health, Safety, and Environment (HSE)

View all Health, Safety, and Environment (HSE) courses · All Mastering Business Excellence domains

WhatsApp Us
763,860Learners Enrolled