Home/Services/Incident Investigation
Service 05

Incident Investigation & Learning

Find what made the incident possible — and give leaders a defensible path from event response to system improvement.

What it is

Significant events need more than a chronology and a conclusion. Independent investigation tests the controls, decisions, conditions and system signals that shaped the event, then translates findings into actions that can be owned, verified and explained.

The aim is learning without naivety: fair to people, honest about systems and ready for regulator, client and executive scrutiny.

Beyond the proximate cause

It's tempting to close an investigation at human error — it's quick, it's tidy, and it requires nothing of the organisation. But it leaves every system condition that produced the error fully intact, waiting for the next person. A genuine investigation traces the absent or failed defences, the task and environmental conditions, the team and individual actions, and the organisational factors underneath them. That's where the corrective actions worth implementing come from.

What you get

  • A
    Sequence of eventsA clear, evidence-based reconstruction of what occurred.
  • B
    Contributing factorsThe conditions and decisions that made the incident possible.
  • C
    Control failure analysisWhich defences were absent, failed, or never existed.
  • D
    Corrective actionsSpecific, owned and capable of preventing recurrence.
When it helps
01

A serious incident needs an independent investigation that will stand up to scrutiny.

02

Your internal investigations keep landing on "human error" and the incidents keep recurring.

03

A regulator, client or board needs confidence the findings are objective.

04

You want corrective actions that fix conditions — not actions that just restate the rule.

FAQCommon Questions

ICAM (Incident Cause Analysis Method) is a structured methodology that looks beyond the immediate actions of the people involved to the organisational and system conditions that made the incident possible — absent or failed defences, individual and team actions, task and environmental conditions, and underlying organisational factors.

Independence brings objectivity, isn't constrained by internal reporting lines, and can ask the uncomfortable questions an internal team may not be positioned to ask. For serious incidents, it also strengthens the credibility of the findings with regulators, clients and boards.

No. A good investigation finds what made the incident possible, not just who was closest to it. Stopping at individual error misses the system conditions that will produce the next incident — so the focus stays on contributing factors and control failures that can actually be fixed.

A clear report identifying the sequence of events, contributing factors, control failures and system conditions, with corrective actions that are specific, owned and capable of preventing recurrence — not simply a restatement of the rule that was broken.

Learn what the incident actually told you.

Start with a private call to test the issue, the exposure and the lightest useful scope.