The 2018 Husky Superior Refinery explosion occurred during a planned turnaround, when the refinery was moving through a temporary operating state with hundreds of workers on site. The U.S. Chemical Safety and Hazard Investigation Board found lessons that reach beyond refinery engineering. A transient hazard becomes a leadership test when the work changes faster than the control system, contractors, operating assumptions, and emergency decisions can keep pace.
A root cause analysis fails when it stops at the person closest to the event. This F1 diagnostic shows six traps that convert system failure into operator blame and gives leaders a more defensible way to investigate.
The 1994 Moura No. 2 explosion killed 11 miners after a heating risk was not effectively recognized and treated. The Queensland inquiry shows why serious incident prevention depends on decision ownership, escalation quality, and evidence that reaches the people who can change the work.
The 1980 Alexander L. Kielland disaster was not only a structural failure. The official inquiry and later Norwegian Auditor General review show how design assumptions, inspection boundaries, operating role changes, and public oversight can combine until a known vulnerability becomes an irreversible loss.
Episode 10 with Tim Page-Bottorff reframes root-cause analysis around the conditions, controls, and decisions that allowed an incident to develop, giving leaders a fairer and more useful investigation sequence.
The Deepwater Horizon disaster was not created by one careless individual. The official investigations describe a chain in which technical uncertainty, schedule pressure, incomplete evidence, and weak challenge combined around a high-consequence decision. The leadership lesson is direct. A barrier is not reliable because it appears on a permit or in a meeting record. It is reliable when the people who own the decision can show that it was understood, available, tested, and strong enough for the conditions in front of them.
The first 24 hours can determine whether an incident investigation explains the work or merely records the event. This guide identifies four evidence gaps that distort early findings and gives EHS leaders decision rules for preserving evidence, testing accounts, and assigning stronger corrective action.
Michael Emery's Episode 14 argument changes the opening move of an incident investigation. Instead of beginning with the rule that was missed or the person who acted, investigators should use curiosity to understand what the work demanded, what the team could see, and which conditions made the deviation reasonable at the time.
The 2010 San Bruno pipeline rupture killed eight people and exposed more than a technical defect. The NTSB investigation connected the event to inaccurate records, weak integrity management, inadequate emergency response, and a safety culture that allowed warning signals to remain disconnected from executive decisions. This F5 case study turns the public record into a practical review for pipeline, utility, and high-hazard leaders.
Witness interviews, document review, and field walkdowns answer different investigation questions. This comparison shows when each source should lead, where it can mislead, and how to combine all three before approving corrective action.
