Near-Miss Signal Explained: 4 Evidence Levels That Separate Warning From Noise
A near miss becomes useful only when its evidence shows what barrier was tested, how close the exposure came to harm, and which conditions made the event possible. This explainer defines four evidence levels that help investigators distinguish a meaningful warning from an unverified report.

Key takeaways
- 01Separate the event story from the evidence that proves an exposure was possible.
- 02Check whether a critical control was present, absent, degraded, or bypassed.
- 03Record how close the work came to harm, rather than relying on the fact that nobody was injured.
- 04Investigate the conditions that shaped the task, including design, planning, supervision, and time pressure.
- 05Use near-miss evidence to strengthen a control, not merely to increase reporting volume.
F7 explainer for EHS managers, incident investigators, and frontline supervisors
A near-miss signal is evidence that an unwanted outcome was possible but did not occur, either because a barrier worked, the exposure ended early, or circumstances changed. The signal becomes decision-grade only when the investigation connects the event to a specific hazard, a tested control, the actual exposure, and the conditions that shaped the work.
A near miss is not automatically a warning, and a dramatic story is not automatically strong evidence. Across 25+ years of safety leadership, Andreza Araújo has consistently treated the quality of the evidence as more important than the label attached to the event. That distinction matters because a weak near-miss report can create activity without improving risk control.
Key Takeaways
- Separate the event story from the evidence that proves an exposure was possible.
- Check whether a critical control was present, absent, degraded, or bypassed.
- Record how close the work came to harm, rather than relying on the fact that nobody was injured.
- Investigate the conditions that shaped the task, including design, planning, supervision, and time pressure.
- Use near-miss evidence to strengthen a control, not merely to increase reporting volume.
Definition
A near-miss signal is a documented event in which a harmful outcome was possible, but the outcome was avoided. The avoided harm may result from a functioning barrier, a last-second recovery, a fortuitous change, or an exposure that stopped before contact. ISO 45001 specifies that organizations must identify hazards and assess risks, so the useful question is not only what happened, but which risk pathway was briefly exposed.
James Reason’s distinction between active failures and latent conditions helps keep the analysis broad. The person closest to the event may have made the final move, yet equipment design, unclear authorization, weak maintenance, or production pressure may have shaped the available choices. Andreza’s book Luck or Capability makes the same practical point in a different way, because an avoided outcome can reflect luck rather than reliable capability.
Level 1: The event is only reported
The first evidence level confirms that someone noticed an unusual condition, but it does not yet prove the hazard, exposure, or control status. A report such as “a tool almost fell” is a starting point, not an investigation finding. It needs location, task, object, height, people exposed, and the condition that prevented contact.
At this level, the supervisor should preserve the original account and ask clarifying questions without turning the conversation into a search for fault. HSE guidance on incident reporting emphasizes learning from events and dangerous occurrences, which means the report should remain specific enough for another person to test.
Level 2: The hazard and exposure are verified
The second evidence level shows what could have caused harm and who or what was exposed. Verification may come from photographs, equipment position, access records, task observations, or measurements that still represent the work condition. A near miss becomes more useful when the investigator can describe the credible injury or damage pathway in concrete terms.
For example, a suspended load that moved outside its planned path should be connected to the people within the possible line of fire, the lift plan, the exclusion zone, and the communication method. The report should state what was observed and what was inferred, because those are different forms of evidence.
Level 3: The barrier performance is known
The third evidence level identifies the control that prevented harm and shows whether it worked as designed. The control may be an interlock, guard, isolation, exclusion zone, permit condition, inspection, or supervisor intervention. A signed form alone does not prove performance, since documentation can show intent while the field condition shows what actually held.
Andreza Araújo’s safety-culture work places this distinction between compliance and control at the center of practical diagnosis. A site can complete the required record and still have a barrier that is unavailable, misunderstood, poorly maintained, or too easy to defeat. The investigation should therefore name the control, test its availability, and identify the evidence that supports the conclusion.
Level 4: The conditions behind the exposure are understood
The fourth evidence level explains why the exposure was possible in that work system. The investigation connects the event to design, planning, workload, competence, supervision, maintenance, contractor interfaces, or decision rights. ILO guidance on occupational safety and health supports this wider responsibility because prevention depends on organizing work safely, not merely correcting the final action.
This level does not remove accountability from the people involved. It prevents the report from stopping at “the procedure was not followed” when the procedure was unclear, the equipment did not match the task, or the operating plan made the safe route impractical. A strong finding states the condition, names the evidence, and assigns an owner who can verify that the exposure pathway has changed, which is the point at which a near-miss review becomes a control decision rather than a narrative exercise.
How to differentiate the four evidence levels
The four levels differ by what they allow a leader to decide. A report supports triage, verified exposure supports risk prioritization, known barrier performance supports control assurance, and understood work conditions support durable corrective action. The levels should not be confused because each one answers a different management question.
| Evidence level | What it proves | What remains open |
|---|---|---|
| Reported event | Someone noticed an unusual condition. | Hazard, exposure, and control status. |
| Verified exposure | A credible harm pathway existed. | Whether the barrier was reliable. |
| Known barrier performance | A specific control prevented or limited harm. | Why the exposure was possible. |
| Understood conditions | The work system shaped the available choices. | Whether the corrective action changes the pathway. |
When a near miss deserves escalation
Escalate a near miss when it involves serious-injury or fatality potential, a failed critical control, repeated exposure, unclear ownership, or a condition that could affect more than one work group. The absence of injury should not lower the priority when the credible outcome was severe. Andreza’s work on safety culture returns to this principle: safety is about coming home, so the organization must examine the path that almost prevented that outcome.
The practical test is whether leaders can answer four questions with evidence. What hazard was present? Who or what was exposed? Which barrier held or failed? What condition made the exposure possible? If the report cannot answer those questions, it may still be worth recording, but it is not ready to guide a major corrective decision.
Frequently asked questions
What is a near-miss signal?
Why are some near-miss reports weak?
Should every near miss receive a full investigation?
What does a strong near-miss investigation identify?
How can leaders avoid turning near-miss reporting into a volume target?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.