UNISA Safety Management Study Notes: Workplace Accident Investigation and Risk Management for Safety Management Students

Workplace accident investigation and risk management are core competencies in safety management because they turn incidents into practical lessons, stronger controls, and better decisions. In a UNISA context, these topics connect legal compliance, operational discipline, and employee welfare, making them essential for exam preparation as well as real workplace application. A strong understanding of accident causation, investigation methods, and risk control systems helps students move beyond memorising definitions and toward solving real safety problems.

1. The purpose and scope of workplace accident investigation in safety management

Workplace accident investigation is the structured process of finding out what happened, how it happened, why it happened, and what must change to prevent recurrence. In safety management, the purpose is not to blame a person and close the file. The purpose is to understand the full chain of events, identify immediate and underlying causes, and strengthen the organisation’s preventive system. This is especially important in South African workplaces, where legal duties, operational pressures, and resource limitations often overlap.

A common exam error is to treat an accident as a single event. In reality, most accidents are the product of multiple factors: unsafe acts, unsafe conditions, equipment failure, poor supervision, inadequate training, weak procedures, production pressure, and sometimes poor organisational culture. Accident investigation therefore belongs within a broader risk management system. When an organisation investigates correctly, it does not merely document loss; it learns, adapts, and improves resilience.

Why accident investigation matters

Accident investigation serves several practical and legal functions:

Prevent recurrence by identifying root causes and correcting them.
Protect workers by reducing exposure to known hazards.
Support legal compliance with occupational health and safety duties.
Preserve evidence for internal review, insurers, regulators, and possible legal proceedings.
Improve management systems by exposing failures in supervision, communication, and control.
Reduce financial losses linked to downtime, compensation, repairs, retraining, and reputational damage.

The value of investigation becomes clearer when viewed in economic terms. A minor hand injury may seem small at first glance, but it can trigger lost work time, temporary replacement labour, medical costs, machine stoppage, overtime, and administrative reporting burdens. A serious incident can multiply these costs significantly. Even when direct compensation amounts are controlled, indirect costs often exceed the visible costs because production interruptions and morale effects are harder to measure.

Accident versus incident versus near miss

In exam questions, definitions must be precise:

Accident: an unplanned event that results in injury, illness, damage, or loss.
Incident: a broader term covering any unplanned event, including accidents and dangerous occurrences.
Near miss: an unplanned event that did not cause injury or damage, but had the potential to do so.

Near misses are especially valuable because they reveal system weaknesses before harm occurs. A loose guard that is noticed before an injury, for example, is a warning signal. A mature safety management culture treats near misses as learning opportunities rather than trivial events.

Principles of effective investigation

A strong investigation is:

Prompt: conducted as soon as possible after the event.
Objective: based on facts, not assumptions.
Systematic: follows a logical sequence.
Comprehensive: examines human, technical, and organisational factors.
Evidence-based: uses photographs, records, interviews, and现场 observations.
Preventive: focused on future control measures.
Documented: recorded clearly for follow-up and accountability.

The investigation should ask not only what the injured worker did, but also what conditions made the error possible. This is crucial because overemphasising individual fault can hide deeper failures. For example, if a worker uses the wrong lifting technique, the immediate cause may be unsafe manual handling. But the underlying causes may include inadequate training, no mechanical lifting aid, unrealistic time pressure, and a supervisor who tolerates shortcuts.

The role of accident investigation in a UNISA safety management context

Within a UNISA-style safety management framework, accident investigation links theory to practice in a disciplined way. Students are expected to understand that prevention is not achieved by good intentions alone. It is achieved by designing safer systems, identifying deviations, and applying controls in a hierarchy of effectiveness. Accident investigation provides the evidence base for those controls.

A useful way to think about the topic is as a cycle:

An event occurs.
The event is contained and reported.
Facts are gathered.
Causes are analysed.
Corrective actions are selected.
Actions are implemented.
Effectiveness is reviewed.
Lessons are shared.

This cycle demonstrates that investigation is part of continuous improvement. If the final step is missing, the organisation repeats the same mistakes.

Common investigation failures

Many organisations fail because they:

start the investigation too late;
focus only on the injured person’s mistake;
confuse symptoms with causes;
fail to preserve the scene;
ignore maintenance records;
do not involve supervisors or worker representatives;
recommend vague actions such as “be careful” or “follow rules”;
do not verify whether the corrective actions worked.

These failures matter because they turn investigation into paperwork instead of prevention. An investigation report with no action plan is an administrative document, not a risk management tool.

2. Accident causation theories and root cause analysis

Understanding accident causation is essential because it determines the quality of the investigation. If investigators believe accidents are random, they will look for chance. If they believe accidents arise from linear chains of failure, they will look for the breaking point. If they understand accidents as system outcomes, they will ask how design, culture, supervision, and environment interacted. In exam answers, theory should not be listed mechanically; it should be used to explain real events.

Heinrich’s domino theory

Heinrich’s domino theory is one of the most widely known accident causation models. It proposes that accidents occur in a sequence resembling falling dominos:

ancestry and social environment,
fault of person,
unsafe act or mechanical condition,
accident,
injury.

The strength of this theory is that it emphasises the sequence leading to injury and the importance of removing one of the dominos to interrupt the chain. Its weakness is that it can oversimplify the complex reality of workplace accidents and may lead to blaming the worker rather than examining management systems.

In modern safety practice, Heinrich remains useful as an introductory model, especially for explaining that accidents are not isolated events. However, it should be supplemented by broader systems-based thinking.

Bird and Germain’s loss causation model

Bird and Germain expanded earlier thinking by showing that losses arise from a sequence involving:

lack of control,
basic causes,
immediate causes,
incident,
loss.

This model is particularly valuable because it links accidents to management failure. “Lack of control” may include inadequate standards, poor compliance, weak training, insufficient supervision, or ineffective monitoring. This is a stronger model for management studies because it makes leadership and system design visible.

Swiss cheese model

The Swiss cheese model explains how multiple defensive layers can each contain weaknesses, or “holes.” An accident occurs when the holes line up, allowing a hazard to pass through all defences. This model is highly useful for examining complex environments such as factories, warehouses, hospitals, mines, and laboratories.

Its practical value lies in showing that no single safeguard is perfect. For example, a machine may have guards, warning signs, lockout procedures, and supervision. If the guard is removed, the warning sign ignored, lockout skipped, and supervision absent, the path to injury opens. The lesson is that robust safety depends on layered barriers, not one control.

Root cause analysis

Root cause analysis is the process of identifying the fundamental reasons an incident occurred, rather than stopping at the visible symptoms. A root cause is usually a system-level deficiency that, if corrected, reduces the likelihood of recurrence.

A useful distinction is:

Immediate causes: direct unsafe acts or unsafe conditions.
Underlying causes: supervisory, training, procedural, or organisational failures.
Root causes: deeper systemic weaknesses in design, culture, leadership, resourcing, or control.

For example, if a worker slips on an oil spill, the immediate cause is the slippery surface. But the underlying cause may be leakage from faulty equipment, and the root cause may be deferred maintenance and weak inspection routines.

The “5 Whys” technique

The 5 Whys is a simple but effective tool for moving from symptoms to causes by asking “Why?” repeatedly until the chain becomes clear.

Example:

Why did the worker fall? Because the floor was oily.
Why was the floor oily? Because a hydraulic hose leaked.
Why did the hose leak? Because it was worn and not replaced.
Why was it not replaced? Because the maintenance schedule was overdue.
Why was the schedule overdue? Because maintenance backlog was not managed and production took priority.

This method is useful, but it has limits. It can oversimplify complex events if used alone. It works best when combined with evidence from interviews, inspection records, and technical analysis.

Fishbone diagram, fault tree, and event tree

Different analytical tools suit different situations:

Tool	Main use	Strength	Limitation
Fishbone diagram	Organising possible causes	Broad and visual	Can remain speculative without evidence
Fault tree analysis	Tracing logical combinations of failures	Strong for complex systems	Requires technical skill
Event tree analysis	Mapping outcome sequences after an initiating event	Useful for scenario analysis	Can be time-consuming
5 Whys	Digging deeper into a specific problem	Simple and practical	May miss multiple interacting causes

In exam writing, the best answer often explains why one tool was chosen over another. A simple kitchen burn at a catering site may only require the 5 Whys and a fishbone diagram. A major industrial fire may require fault tree analysis, technical reports, and cross-functional investigation.

Root cause thinking versus blame thinking

Blame thinking asks, “Who caused this?” Root cause thinking asks, “What conditions made this possible?” The difference matters because people work within systems. If workers are constantly required to improvise because procedures are outdated or equipment is unavailable, accidents will continue even if individual discipline improves.

That does not mean personal accountability disappears. Workers must follow procedures, wear protective equipment, and report hazards. But meaningful prevention requires balancing individual responsibility with organisational responsibility. In exam terms, this is a good place to explain that safety performance is shared across the hierarchy of control, supervision, and worker participation.

3. The accident investigation process: from scene preservation to report writing

A practical investigation follows a disciplined sequence. Missing steps weakens the validity of findings, and weak findings produce weak corrective actions. In real workplaces, time pressure can tempt managers to tidy the scene before collecting evidence or to close the matter quickly. That approach may feel efficient, but it often destroys the learning value of the investigation.

Step 1: Immediate response and scene control

The first priority is always life, health, and containment. This means:

providing first aid and emergency response;
isolating hazards;
stopping machinery if needed;
preventing further access to the scene;
notifying responsible personnel.

Once emergency needs are addressed, the scene should be preserved as far as possible. This does not mean freezing the workplace indefinitely. It means protecting evidence until the relevant facts have been gathered.

Step 2: Notification and reporting

Accidents must be reported through the organisation’s internal channels and, where required, to external authorities. Reporting lines should be clear, and employees should know:

who to notify,
how quickly to report,
which forms to complete,
what information to provide.

Delays in reporting reduce accuracy because memories fade and evidence is disturbed. A culture of rapid reporting should be encouraged by management, not punished. If workers fear blame, they may hide near misses and minor injuries, removing valuable warning signals from the system.

Step 3: Evidence collection

Evidence is the backbone of the investigation. Useful sources include:

photographs and video,
sketches or site diagrams,
witness statements,
maintenance records,
training records,
risk assessments,
inspection checklists,
machine logs,
permit-to-work documents,
medical reports where appropriate,
CCTV footage,
material safety data sheets,
procedures and work instructions.

Evidence should be collected methodically. Photographs should show overall context first, then close-up details, then measurements or labels. Witness statements should be taken separately to reduce contamination of memory. A good investigator records facts, not interpretations. For example, “oil observed on floor near press machine” is stronger than “housekeeping was poor” because the first statement can be verified.

Step 4: Interviews

Interviews are one of the most important and sensitive parts of the process. They should be conducted respectfully and without intimidation. The aim is to understand how the event unfolded from different perspectives.

Good interview practice includes:

interviewing witnesses separately;
asking open-ended questions;
avoiding leading questions;
allowing the person to describe events in their own words;
confirming timelines and details;
recording responses accurately;
maintaining confidentiality where necessary.

Examples of useful questions include:

What were you doing just before the incident?
What changed from normal conditions?
What equipment was in use?
Were there any warnings, alarms, or abnormal sounds?
What training had been received?
Were there any time or production pressures?

Interviews should be handled carefully because people may be anxious, defensive, or traumatised. A fair and respectful approach tends to produce better information than a hostile one.

Step 5: Analysis of facts

Once evidence is collected, the investigator must organise it into a coherent timeline and causal structure. This includes separating:

what happened before the event,
what happened during the event,
what happened after the event.

It is often helpful to distinguish between immediate causes and underlying causes. For example, if a forklift overturns, the immediate cause may be excessive speed while turning. The underlying causes may include poor traffic design, inadequate operator training, lack of seatbelt enforcement, and weak supervision.

Step 6: Corrective and preventive actions

A strong report does not stop at diagnosis. It recommends actions that are:

specific,
feasible,
prioritised,
assigned to responsible persons,
supported by deadlines,
measurable.

A weak recommendation is “improve safety awareness.” A stronger recommendation is “conduct refresher training for all forklift operators by 15 September 2026, update traffic routes with floor markings, and implement weekly supervisor inspections using a standard checklist.”

The hierarchy of controls should guide action selection. Eliminating the hazard is preferable to relying on personal protective equipment alone. For instance, if a machine can be redesigned to prevent access to a danger zone, that is stronger than issuing gloves and warning signs.

Step 7: Reporting and documentation

The final report should be clear enough for management, supervisors, workers, and auditors to understand. A good report usually contains:

date, time, and location of the incident;
people involved;
description of the event;
injuries or damage;
evidence reviewed;
causal analysis;
root causes;
corrective actions;
responsible persons and deadlines;
follow-up arrangements.

The report must be factual and objective. It should avoid emotional language and unsupported conclusions. When a report is well written, it becomes a management tool. When it is vague, it becomes a file that gathers dust.

Step 8: Follow-up and verification

The investigation is incomplete until corrective actions are checked. Managers must verify whether the control measures were actually implemented and whether they worked. This is one of the most neglected steps in practice.

Follow-up should answer:

Was the action completed on time?
Did the control reduce the hazard?
Did workers understand the new procedure?
Did the change create new risks?
Are additional controls necessary?

For example, if a machine guard is replaced, the organisation should confirm that the replacement guard is correctly fitted and does not create a new maintenance hazard. If training is provided, attendance and competence should be verified, not merely recorded.

4. Risk management fundamentals: identifying, assessing, and controlling workplace hazards

Risk management is the structured process of identifying hazards, assessing the level of risk, controlling that risk, and reviewing the controls. It is not separate from accident investigation; it is the preventive counterpart. Accident investigation asks why harm occurred after the fact. Risk management asks what could happen and how to prevent it before harm occurs.

Hazard, risk, and exposure

These terms must be distinguished carefully:

Hazard: a source of potential harm.
Risk: the likelihood that harm will occur and the severity of the harm.
Exposure: the extent to which a person or asset comes into contact with the hazard.

For example, a rotating blade is a hazard. The risk depends on how often workers are near it, whether it is guarded, whether lockout procedures exist, and what injuries could result. Exposure increases when workers are required to clean or adjust the blade without isolating energy sources.

The risk management cycle

A practical cycle includes:

identify hazards;
assess risks;
determine existing controls;
choose additional controls;
implement the controls;
monitor and review.

This cycle must be continuous because workplaces change. New equipment, new workers, production changes, maintenance backlogs, and contractor activity all alter risk profiles. A risk assessment performed once and then forgotten quickly becomes outdated.

Risk assessment criteria

A basic risk assessment considers:

likelihood: how probable the event is;
severity: how serious the consequences could be;
frequency/exposure: how often people face the hazard;
existing controls: what is already in place;
residual risk: the remaining risk after controls.

A simple 5×5 matrix is commonly used in organisations because it is easy to apply. However, the matrix should not be used mechanically. A medium-likelihood event with catastrophic consequences may deserve stronger action than the matrix alone suggests. Professional judgement matters.

Example risk matrix

Likelihood	Description	Severity level	Example interpretation
1	Rare	1	Unlikely to occur under normal conditions
2	Unlikely	2	Could happen occasionally
3	Possible	3	May happen in some circumstances
4	Likely	4	Expected to happen repeatedly
5	Almost certain	5	Expected to occur frequently

A workplace may pair likelihood and severity scores to rank risks. For example, a hazard scored 4 for likelihood and 5 for severity would be treated as very high risk. The exact scoring model may differ by organisation, but the principle remains the same: higher severity and higher likelihood demand stronger controls.

Hierarchy of controls

The hierarchy of controls is one of the most important concepts in safety management. It ranks control measures from most effective to least effective:

Elimination – remove the hazard entirely.
Substitution – replace the hazard with something safer.
Engineering controls – isolate people from the hazard.
Administrative controls – change the way people work.
Personal protective equipment (PPE) – protect the worker with equipment.

The hierarchy matters because it prevents overreliance on human behaviour. People are fallible, and PPE depends on correct use, maintenance, and enforcement. If a hazard can be eliminated or engineered out, that is usually a better solution than asking workers to “be careful.”

Examples of controls by hazard type

Machine-related hazards

Elimination: redesign the process to remove manual feeding.
Substitution: use a less dangerous machine or tool.
Engineering: fit guards, interlocks, emergency stops.
Administrative: lockout/tagout procedures, operator training.
PPE: cut-resistant gloves, eye protection.

Chemical hazards

Elimination: remove unnecessary chemical use.
Substitution: use a less toxic cleaning agent.
Engineering: local exhaust ventilation, sealed containers.
Administrative: labeling, storage rules, exposure limits.
PPE: respirators, gloves, face shields.

Slips, trips, and falls

Elimination: remove clutter and leaks.
Substitution: use non-slip materials.
Engineering: anti-slip floors, drainage, handrails.
Administrative: housekeeping checks, cleaning schedules.
PPE: slip-resistant footwear.

Risk registers and prioritisation

A risk register is a structured record of hazards, risks, existing controls, further controls, responsible persons, and review dates. It supports accountability and continuity. Good risk registers are living documents; bad ones are created for audits and then ignored.

A simple register might contain the following fields:

Hazard	Possible harm	Existing controls	Risk rating	Additional action	Responsible person	Review date
Wet floor near loading bay	Slips and fractures	Cleaning schedule, warning sign	High	Repair drainage, install anti-slip surface	Facilities manager	30 June 2026
Unshielded machine blade	Cuts and amputations	Operator instruction	Very high	Fit interlock guard, stop use until fixed	Maintenance manager	15 May 2026

Why controls fail

Controls often fail because of:

poor design,
insufficient maintenance,
weak enforcement,
production pressure,
worker non-compliance,
lack of understanding,
changes in the work process,
contractor activity,
cost-cutting.

A control is only effective if it remains in place and functions as intended. A machine guard that is removed to speed up production is not a control in practice. Similarly, a procedure that exists only in a manual but is not followed on the shop floor is a weak control.

The relationship between accident investigation and risk assessment

Accident investigation should always feed risk assessment. If an incident reveals a new hazard, the risk register must be updated. If the incident shows that existing controls failed, the risk rating may need to be increased until corrective action is complete. This feedback loop is central to effective risk management.

A mature organisation does not treat the investigation report as a dead end. It uses the report to revise procedures, redesign work, train staff, and re-evaluate risk. That is how prevention becomes organisational memory rather than temporary reaction.

5. Legal, ethical, and organisational responsibilities in South African workplace safety

Workplace accident investigation and risk management are not only technical tasks; they are legal and ethical responsibilities. In South Africa, safety management operates within a framework that expects employers to provide and maintain a working environment that is safe and without risk to health, as far as reasonably practicable. This is a high standard because it requires active management, not passive compliance.

Legal responsibility and due diligence

Legal compliance in safety management involves more than filing forms after an incident. It includes:

identifying hazards,
assessing risks,
implementing controls,
training workers,
maintaining equipment,
reporting incidents,
preserving evidence,
cooperating with investigations,
taking corrective action.

Due diligence means showing that reasonable steps were taken to prevent harm. If a workplace has repeated incidents in the same area and no corrective action is taken, it becomes difficult to argue that management exercised proper care.

The role of managers and supervisors

Managers and supervisors are central to safety performance because they translate policy into daily practice. Their duties usually include:

enforcing safe procedures;
checking that equipment is fit for use;
ensuring workers are trained and competent;
monitoring compliance;
responding to hazards promptly;
investigating incidents thoroughly;
supporting corrective action;
maintaining communication with workers.

Supervisors are often the first management layer to notice unsafe conditions. Their role is therefore practical, not ceremonial. A supervisor who ignores repeated shortcuts or defect reports contributes to the creation of risk, even if no accident has yet occurred.

Worker responsibilities and participation

Workers also have duties. They must:

follow procedures,
use equipment correctly,
wear required PPE,
report hazards and incidents,
cooperate with training and investigations,
avoid reckless behaviour.

However, worker participation is more than compliance. Workers often know where the real risks are because they live with the work every day. Their input improves risk assessments and investigation findings. Involving workers in safety committees, toolbox talks, and hazard reporting systems strengthens the quality of safety information.

Ethical dimensions of investigation

Ethical investigation requires fairness, confidentiality, honesty, and respect. It is unethical to use an investigation as a hidden disciplinary trap while pretending it is a learning process. That approach reduces trust and causes underreporting.

Ethical principles include:

Fairness: assess evidence without prejudice.
Confidentiality: protect sensitive personal information.
Respect: treat injured workers and witnesses with dignity.
Integrity: avoid manipulating findings to protect management reputation.
Accountability: ensure recommendations are implemented.

A workplace safety culture improves when people believe reporting will lead to correction, not humiliation.

Organisational culture and safety climate

Safety culture refers to the shared values, beliefs, and practices that shape how safety is prioritised. Safety climate refers to workers’ perceptions of how seriously safety is taken at a given time. These concepts matter because even well-designed systems can fail if the culture rewards speed over caution.

Signs of a weak safety culture include:

underreporting of incidents,
tolerance of repeated rule-breaking,
blame focused only on frontline workers,
poor follow-up of corrective actions,
production targets that override safety concerns,
low participation in risk assessments.

Signs of a stronger safety culture include:

open reporting,
visible management commitment,
regular safety discussions,
prompt repairs,
learning from near misses,
consistent enforcement across all levels.

Multi-employer and contractor risks

Many South African workplaces involve contractors, visitors, labour brokers, or temporary workers. This creates additional complexity because responsibility is shared across different parties. Risk management must therefore include:

contractor induction,
permit systems,
site rules,
supervision of outsourced work,
coordination of overlapping activities,
clear emergency arrangements.

A contractor accident is often not just a contractor problem. If the host employer failed to provide safe site conditions or failed to coordinate work properly, the system contributed to the event. This is a common exam issue because it tests understanding of shared responsibility.

Documentation and accountability

Documentation supports accountability. Records commonly include:

risk assessments,
inspection checklists,
training certificates,
maintenance logs,
incident reports,
corrective action trackers,
committee minutes.

These records are not mere bureaucracy when used properly. They show whether the organisation identified risks, took action, and followed through. They also support learning across time because new managers can see previous hazards and responses.

A practical view of “reasonably practicable”

The phrase “reasonably practicable” balances risk reduction against feasibility, cost, and available technology. It does not excuse inaction. If a serious hazard can be reduced with a known, affordable, and effective control, failing to implement that control may be difficult to justify. In practice, organisations must compare the level of risk against the time, money, and effort needed to reduce it.

The correct approach is not to ask, “Can we afford safety?” but rather, “Can we justify leaving this risk unmanaged?” That shift in thinking is fundamental to effective safety leadership.

6. Applying accident investigation and risk management in practical UNISA exam answers and workplace scenarios

Exams often require students to apply theory to a scenario rather than merely define concepts. A strong answer links the facts of the case to accident causation, investigation steps, risk control, and legal responsibility. The best responses read like professional analyses, not memorised notes.

How to structure a high-quality exam answer

A practical answer can follow this pattern:

Identify the incident and immediate problem.
Describe the likely hazards involved.
Explain the causes using a causation model.
Show how the investigation should proceed.
Recommend controls using the hierarchy of controls.
Explain the legal and organisational implications.
Conclude with prevention and review.

This structure keeps the answer focused and complete.

Example scenario: warehouse forklift incident

A forklift at a distribution warehouse strikes a pedestrian worker during a busy loading period. The worker suffers a leg fracture. The initial explanation is that the operator “did not see” the pedestrian. A superficial investigation might stop there and recommend more caution. A proper investigation would go deeper.

Immediate causes

forklift and pedestrian shared the same route;
visibility was limited;
no physical separation existed;
traffic movement was congested.

Underlying causes

poor warehouse layout;
inadequate traffic management plan;
incomplete pedestrian markings;
weak supervision during peak periods;
possible pressure to move stock quickly.

Root causes

risk assessment did not address pedestrian-vehicle interaction adequately;
management accepted an unsafe layout;
control measures relied too much on behaviour rather than engineering separation;
near misses may have been ignored.

Corrective actions

redesign traffic routes;
install barriers separating pedestrians from forklifts;
create designated crossings;
review peak-period scheduling;
enforce speed limits;
retrain operators and supervisors;
update the risk register and conduct follow-up audits.

The important lesson is that the injury was not caused only by operator error. The system allowed a dangerous interaction to exist.

Example scenario: chemical splash in a maintenance workshop

A maintenance technician is splashed in the eye with a cleaning solvent during equipment servicing.

A good analysis would examine:

whether the solvent was correctly labeled;
whether eye protection was available and worn;
whether the task was assessed in advance;
whether there was a safe work procedure;
whether the chemical could be substituted with a less hazardous product;
whether emergency eyewash facilities were accessible.

The controls should move up the hierarchy. Providing goggles is helpful, but if the task can be redesigned to eliminate splashing or the solvent can be substituted, that is better. Emergency response readiness also matters because fast eye irrigation can reduce injury severity.

Example scenario: slip injury at a cafeteria

A staff member slips on water near a washing area and injures a wrist. The visible cause is the wet floor. The investigation must ask:

where the water came from;
whether drainage is adequate;
whether cleaning schedules are realistic;
whether mats are used;
whether warning signs are placed correctly;
whether supervisors inspect the area regularly.

A poor answer would simply say “place a wet floor sign.” A better answer would recommend:

repairing leaks,
improving drainage,
changing cleaning procedures,
using anti-slip flooring or mats,
assigning inspection responsibility,
recording corrective actions.

How to distinguish good and bad recommendations

Good recommendations are:

specific;
measurable;
assigned to someone;
time-bound;
related to root causes.

Bad recommendations are:

vague,
moralising,
impossible to verify,
dependent only on worker behaviour.

Examples:

Weak: “Employees must be more careful.”

Strong: “Install machine guards on the cutting unit by 10 June 2026, retrain all operators by 12 June 2026, and conduct weekly compliance inspections for the next three months.”

Integrating risk management into daily operations

Risk management should be routine, not occasional. Practical integration includes:

pre-job risk assessments before high-risk tasks;
toolbox talks at the start of shifts;
routine inspections and maintenance;
reporting and analysis of near misses;
periodic review of risk registers;
worker participation in hazard identification;
management review of recurring patterns.

The value of these practices is that they catch small failures before they become major losses. For instance, repeated reports of damaged pallet racking may indicate a growing risk of collapse. If ignored, the issue can escalate into a serious incident involving injury, stock loss, and legal consequences.

Final exam pointers

When answering a workplace accident investigation question, remember these essentials:

distinguish facts from assumptions;
separate immediate, underlying, and root causes;
use a recognised model such as the Swiss cheese model or 5 Whys appropriately;
recommend controls according to the hierarchy of controls;
include follow-up and verification;
show awareness of management responsibility and worker participation;
keep the answer practical, structured, and evidence-based.

Strong safety management thinking does not end with identifying what went wrong. It asks how the organisation can become more reliable, more transparent, and more resistant to future harm. That is the real purpose of workplace accident investigation and risk management: protecting people by improving the system in which they work.