Incident Investigation

4 questions from Episode 10 with Tim Page-Bottorff

Tim Page-Bottorff reframes incident investigation around four questions that move leaders from blame toward evidence, action, and field recovery.

By 5 min read
investigative scene on 4 questions from episode 10 with tim page bottorff — 4 questions from Episode 10 with Tim Page-Bottorf

Key takeaways

  1. 01Start incident investigation with what changed in the work system, because person-first questioning narrows evidence before the first 24 hours are complete.
  2. 02Protect physical, digital, procedural, and witness evidence before naming causes, especially when a serious near miss involves multiple shifts or contractors.
  3. 03Check investigator workload before high-stakes RCA sessions, since burnout can make leaders accept the first plausible answer instead of the strongest evidence.
  4. 04Approve corrective actions only when they change exposure in the field, not when they merely close a retraining task in the tracking system.
  5. 05Use Andreza Araujo's safety culture work to connect RCA quality with leadership habits, then review Episode 10 before your next serious-event debrief.

Episode 10 of the Headline Podcast featured Tim Page-Bottorff on November 19, 2025, in a conversation with Andreza Araujo and Dr. Megan Tranter about leadership, burnout, storytelling, and incident investigation. Tim's central argument was that safety leaders do not improve learning by searching for a person to blame, because the useful question after an event is what in the work system made the decision, exposure, or silence more likely.

Why should incident investigation start with what, not who?

Incident investigation should start with what happened because a person-first search narrows the evidence too early. OSHA recordkeeping rules under 29 CFR 1904 require employers to record defined injuries and illnesses, but the record itself does not explain why the event became possible. The investigation has to preserve facts before memory, hierarchy, and fear reshape the story.

On Headline Podcast, Tim Page-Bottorff said: 'I don't think we should do a root-cause who. I think we should do a root-cause what.' That sentence matters because it separates accountability from accusation. A serious event still needs decisions, deadlines, and ownership, yet the first technical move is to ask what conditions were present, what controls failed, what signals were missed, and what tradeoffs were normalized before the event.

As Andreza Araujo argues in Safety Culture: From Theory to Practice, culture appears in repeated decisions before it appears in slogans. In an investigation, that means the supervisor should not begin by asking who broke the rule. The stronger opening is to build the factual chain through incident witness interviews, photos, time stamps, permits, maintenance records, staffing levels, and production constraints.

What evidence should be protected in the first 24 hours?

The first 24 hours decide whether an incident investigation becomes evidence-led or memory-led. BLS recorded 5,283 fatal work injuries in the United States in 2023, which shows why serious events cannot be handled as informal debriefs. Evidence must be secured while the worksite, digital records, and witness recollections still reflect the event rather than the organization's preferred explanation.

The common trap is speed theater. A team wants a preliminary cause in the same meeting where it is still missing the CCTV export, the lockout record, the radio log, and the exact task plan. That is how a serious near miss becomes a clean slide with weak facts. Tim's question pushes the team to slow down just enough to protect the chain of evidence.

In practice, the EHS manager should assign one person to preserve physical evidence, one to freeze digital evidence, one to map witnesses, and one to collect procedure and permit records. The method can follow an evidence map, timeline, or causal factor chart, but the rule is the same: no causal claim should outrun the evidence that supports it.

How does burnout change the quality of safety judgment?

Burnout changes safety judgment because it lowers the leader's capacity to notice weak signals, listen without defensiveness, and make proportionate decisions. NIOSH describes Total Worker Health as an approach that integrates protection from work-related hazards with promotion of worker well-being. That integration matters after incidents because exhausted teams often reduce investigation to closure rather than learning.

On Headline Podcast, Tim Page-Bottorff said: 'The burnout that I was feeling, I did not know I was feeling. My Marine Corps mentality was just fight through it.' The quote is useful because many safety professionals reward endurance while ignoring the cognitive cost. A fatigued investigator may accept the first plausible answer, avoid a difficult interview, or approve a corrective action that looks responsible but does not change exposure.

Across 25+ years leading EHS at multinationals, Andreza Araujo identifies this as a leadership risk, not a personal weakness. The practical response is to add a workload check before high-stakes RCA sessions. If the same manager has handled a shutdown, a serious injury, and 3 executive briefings in 48 hours, the organization should appoint a second reviewer before findings are finalized.

Where does storytelling help investigation without diluting facts?

Storytelling helps incident investigation when it organizes verified facts into a sequence that leaders can remember and act on. The story must not replace evidence. It should connect the event, the missed controls, the pressures, and the decision points so the business understands why the same pattern could recur in a different department within 30 days.

Tim Page-Bottorff's broader Episode 10 point was that humor and storytelling can bring people into the conversation. In incident investigation, the safe version is not entertainment. It is disciplined translation. A 40-page technical report may satisfy the file, but a 1-page learning brief can help supervisors change pre-task questions, shift handover points, and stop-work thresholds.

The weak version of storytelling turns an injured worker into a lesson object. The stronger version protects dignity, keeps names out when possible, and focuses on the work system. After the RCA is approved, the team should publish a 10-day incident learning brief that explains the pattern, the control change, and the exact behavior expected from leaders.

Comparison

Tim's Episode 10 idea is most useful when it changes the operating model of an investigation. The table below contrasts the common blame-led pattern with an evidence-led pattern that still preserves accountability.

Decision pointBlame-led investigationEvidence-led investigation
Opening questionWho failed to follow the rule?What made the unsafe action or exposure more likely?
First 24 hoursCollect statements and search for a primary cause.Preserve physical, digital, procedural, and witness evidence before judging.
Leadership roleDemand closure and visible discipline.Demand evidence quality, control change, and line ownership.
Corrective actionRetrain the worker and resend the procedure.Change the control, decision threshold, supervision routine, or work design.
Learning outputPublish a generic alert within 2 days.Issue a focused learning brief within 10 days, then verify field adoption.

What should leaders ask before approving corrective actions?

Leaders should ask whether the corrective action changes exposure, not whether it sounds responsible. OSHA's incident-investigation guidance says employers should identify root causes and implement corrective actions that prevent recurrence, and that standard cannot be met by repeating training when the control weakness sits in staffing, design, supervision, or maintenance planning.

In more than 250 cultural transformation projects, Andreza Araujo observes that action closure often becomes a metric that hides weak fixes. A retraining action can close in 7 days and still leave the same job step exposed. A stronger action may take 45 days because it requires a guard, an interlock, a permit redesign, a maintenance backlog decision, or a change in authorization rights.

The approval question should be concrete: if the same task is performed next Tuesday on night shift by a different crew, what will be physically, procedurally, or organizationally different? If the answer is only awareness, the action should go back to triage through corrective action triage after a serious near miss.

Recommendation

Use Tim Page-Bottorff's Episode 10 questions as a 4-part review before closing the next serious event: what happened, what evidence proves it, what pressures shaped the decision, and what control will be different in the field. This review fits incident investigation, but it also supports psychological safety because workers are more likely to speak when they see leaders searching for conditions rather than scapegoats.

On Headline Podcast, Tim Page-Bottorff said: 'If you don't discipline yourself, someone else will.' For safety leaders, the discipline is methodological. Do not approve a cause before the evidence is stable, do not approve a learning brief before the lesson is specific, and do not approve a corrective action before it changes work. Listen to the full conversation: Listen to the full conversation.

Topics headline-podcast episode-companion incident-investigation root-cause-analysis safety-leadership psychological-safety

Frequently asked questions

What does root-cause what, not who mean?
It means the investigation begins with the conditions that made the event possible, not with a search for the person to blame. The team still assigns ownership for actions, deadlines, and decisions, but it first protects evidence about controls, staffing, supervision, work design, and pressure. Tim Page-Bottorff used this framing in Episode 10 to keep incident reviews focused on learning.
What evidence should be collected first after an incident?
Collect evidence that can disappear or be altered within the first 24 hours: photos, CCTV, radio logs, permits, isolation records, maintenance history, witness availability, task plans, and equipment condition. Witness interviews matter, but they should be paired with physical and digital evidence so the final causal story is not built only from memory.
How can burnout affect an incident investigation?
Burnout can reduce patience, curiosity, and attention to weak signals. A fatigued investigator may accept an easy explanation, avoid a difficult interview, or close actions that look responsible but do not reduce exposure. Andreza Araujo's leadership work treats this as an organizational design issue, not only an individual resilience issue.
What is the difference between an incident alert and a learning brief?
An incident alert usually informs people that an event happened and lists immediate cautions. A learning brief explains the pattern behind the event, the control weakness, and the specific behavior or decision expected next. For serious events, the brief should follow the evidence map and corrective action plan rather than rush ahead of the investigation.
When should corrective actions be rejected?
Corrective actions should be rejected when they only repeat training, resend a procedure, or ask workers to pay more attention without changing the exposure. A strong action changes a control, threshold, inspection routine, work design, supervision cadence, or decision right. The test is whether the same task would be safer next shift.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI