New Incident Investigation Lead in 84 Days: Establish an Evidence-to-Action Routine

F6 role profile for a new incident investigation lead

A new incident investigation lead often inherits a process that looks complete on paper. There is a form, a committee, a deadline, and a familiar list of causes. The first serious event then reveals the weakness. Photographs are missing, witness accounts are collected too late, the work area has already been reset, and the corrective action is assigned before anyone can explain what changed.

The role is not to produce a longer report. It is to protect evidence, test causal claims, and move the organization from a plausible story to an owned risk decision. Over 84 days, the lead should establish a routine that supervisors can use under pressure and leaders can trust when the consequences are serious.

An incident investigation lead creates value by making evidence reliable, separating facts from interpretation, examining the conditions that shaped the event, and verifying whether corrective action changed the exposure. The lead coordinates the process without taking operational ownership away from the manager who controls the work.

What an incident investigation lead needs to understand before starting

An investigation is not a search for the person closest to the final error. It is a structured decision about what happened, why the conditions made it possible, and which changes deserve resources and authority. James Reason?s work on organizational accidents is useful here because it distinguishes visible actions from latent conditions that remain embedded in design, supervision, maintenance, workload, and information.

That distinction also protects the organization from a common trap. If every event ends with ?the worker was not careful,? the investigation has described proximity rather than causation. Andreza Araujo makes a related argument in Sorte ou Capacidade, where accidents are treated as a question of system capability rather than luck or personal failure. The lead should therefore ask which barriers were available, usable, understood, and verified at the moment of the decision.

First week: protect the evidence and clarify authority

During the first week, map the notification path from the field to the investigation lead. Specify who can preserve the scene, who can authorize an operational reset, who collects photographs and records, and who decides whether the event requires external notification. The procedure should work on a night shift, during a contractor event, and when the supervisor who owns the area is unavailable.

Then create a simple evidence register. It should identify the item, its source, the person who collected it, the time, and the decision it may support. Include work instructions, permit records, training evidence, maintenance history, staffing information, equipment condition, relevant messages, and accounts from people who saw the task before and after the event.

The first week is also the right time to establish a rule that prevents premature certainty. Every early statement should be marked as an observed fact, a reported account, or an interpretation that still needs testing. That small distinction makes the later discussion more honest.

First 30 days: build the investigation rhythm

By day 30, the lead should have a repeatable intake and triage routine. The routine should classify the event by consequence and potential, assign the right level of investigation, and identify immediate controls without presenting them as the final explanation. A near miss and a serious injury need different urgency, but both deserve evidence that can improve future decisions.

Use interviews to reconstruct the task as it was performed, not merely to compare behavior with a written procedure. Ask what the person was trying to achieve, what information was available, what changed during the task, which control was difficult to use, and who had authority to alter the conditions. The answers should be tested against records and physical evidence.

At the end of the first month, review three completed investigations with supervisors and operations leaders. Look for repeated weak points, such as missing ownership, unsupported conclusions, corrective actions that only update documents, or actions that cannot be verified in the field.

Month 2: turn causal findings into owned decisions

The second month is where the role moves beyond investigation administration. For each causal finding, identify the control that should change, the manager who can change it, the resources required, and the evidence that will show whether the response worked. An action without an owner is a recommendation. An action without verification is an intention.

Do not let retraining become the automatic answer. Training can address a knowledge or skill gap, but it cannot repair an unavailable guard, an unreliable alarm, a conflicting production target, or a permit that does not reflect the actual task. A sound corrective-action review asks what must change in the work system before asking what people must remember.

Invite the responsible supervisor into the decision rather than handing over a finished report. This keeps the response connected to operational reality, while the investigation lead protects the quality of the reasoning and challenges explanations that stop too early.

Month 3: verify whether the work became safer

By the third month, select a small set of completed actions for field verification. Observe the task, inspect the control, ask the worker to explain the decision path, and compare the current condition with the evidence recorded during the investigation. If the action exists only in a revised procedure or a closed database item, it has not yet proved its value.

Verification should also look for displacement. A new control may remove one exposure while adding another through extra handling, awkward access, delay, or confusion about authority. The investigation lead does not need a perfect prediction, but the lead must keep the corrective action open to evidence that the work changed in an unintended way.

Month 4 onward: make evidence-to-action the normal standard

After 84 days, the lead should be able to show how an event moved through notification, evidence protection, analysis, ownership, and verification. The measure is not the number of reports closed. It is whether leaders can explain what changed, workers can describe the new control, and repeat concerns are visible before another event forces attention.

Andreza Araujo?s Make The Difference: Be a Leader in Health & Safety is a useful resource for this stage because investigation quality depends on everyday leadership decisions, not only on specialist technique. Her broader work on safety culture also reinforces the point that a written commitment becomes credible only when repeated choices support it.

Common mistakes that weaken the role

• Starting with a preferred cause before the evidence is protected.
• Confusing a completed interview with a tested explanation.
• Assigning corrective action to the safety function when operations controls the exposure.
• Closing an action because a document changed, without checking the task.
• Using the investigation to defend an existing decision instead of revisiting it.

A practical self-check is simple. If the lead cannot identify the evidence supporting a conclusion, the owner who can change the condition, and the field proof that will confirm the change, the investigation is not ready to close.

Resources to deepen the practice

For leadership application, read Make The Difference: Be a Leader in Health & Safety. For the connection between repeated decisions and safety culture, consult Safety Culture: From Theory to Practice. The Safety School by Andreza Araujo provides additional learning for professionals who need to strengthen investigation, leadership, and prevention practice.

Explore Andreza Araujo?s books and Safety School resources when the role requires a deeper practice than a form-based investigation.

Conclusion

A new incident investigation lead does not need 84 days to sound authoritative. The lead needs 84 days to make evidence harder to lose, explanations harder to accept without testing, and corrective actions easier to verify. When the routine connects field evidence to operational ownership, an investigation becomes a prevention system rather than a post-event archive.

Learn more about Andreza Araujo?s safety leadership work and the practical path from safety culture principles to decisions that change work.