Incident Investigation

How to Turn a High-Potential Near Miss Into a Decision-Ready Review in 9 Steps

Use a nine-step evidence workflow to turn a high-potential near miss into a clear control decision before similar work resumes.

By 5 min read
Safety leaders reviewing evidence after a high-potential near miss

Key takeaways

  1. 01Protect people and preserve the scene before the event narrative hardens.
  2. 02Describe observable facts separately from the credible high-consequence outcome.
  3. 03Distinguish failed controls from controls that were missing or unsuitable.
  4. 04Keep assumptions and missing evidence visible before assigning corrective actions.
  5. 05Set a named decision owner and restart criteria before similar work resumes.

A high-potential near miss creates a short window in which an organization can still see the exposure before the next person meets it. The window closes when the review becomes a reassuring story about luck, a search for the operator who was closest to harm, or a list of corrective actions with no decision owner.

This nine-step method helps a supervisor, investigation lead, or operations manager turn the event into a decision-ready review. The purpose is not to produce a longer report. It is to identify what the evidence proves, what it does not prove, and which control must change before similar work continues.

A decision-ready near-miss review connects the event, the credible exposure, the failed or absent control, the evidence still needed, and the person authorized to change the work before recurrence.

Step 1: Protect people and preserve the scene

Stabilize the work before collecting a narrative. Keep people away from the remaining exposure, isolate equipment when required, and make a temporary decision about whether similar tasks can continue. The first control decision belongs in the review because it shows how the organization responded while uncertainty was still high.

Preserve the scene without treating every object as evidence. Photograph positions, access routes, guards, tools, materials, controls, and warning devices before they are moved, then record what changed and why. OSHA's incident investigation guidance emphasizes finding root causes and correcting hazards rather than stopping at the immediate event description.

Step 2: Write the event in observable language

Describe what happened without adding motive, competence, or intention. State the task, location, equipment, movement, energy, and point at which a person or asset entered the exposure. “The worker ignored the rule” is an interpretation. “The worker crossed the marked boundary while the line was being repositioned” is an observation that can be tested.

Use the first account as a lead, not as the final record. In more than 250 cultural transformation projects supported by Andreza Araujo, a practical lesson is that the quality of a safety decision depends on whether the organization can connect the visible event to the conditions that shaped it.

Step 3: State the credible high-consequence outcome

Near misses are not valuable because the outcome was harmless. They are valuable when the event exposes a credible path to serious harm. State what could have happened, to whom, and through which mechanism, while separating the observed outcome from the credible consequence.

Do not inflate every event into a fatality scenario. Ask what energy, movement, substance, height, pressure, vehicle path, or decision failure could have produced the more serious outcome. James Reason's work on organizational accidents supports this distinction because the visible action is only one part of a chain that can include latent design, supervision, planning, and maintenance conditions.

Step 4: Map the control that should have interrupted the path

Identify the control that should have prevented the exposure, detected the drift, or limited the consequence. Name its intended effect rather than its document title. A permit, briefing, guard, alarm, spotter, inspection, or training record is not automatically a functioning control.

Ask what the control was supposed to change in the work. If the answer is only “the form should have been completed,” the review has not reached the barrier. The critical-control verification review can help test whether the barrier existed at the point of exposure and whether anyone checked its effectiveness.

Step 5: Separate failed controls from missing controls

A failed control was present but did not perform its intended function. A missing control was never available, never assigned, or never designed for the actual exposure. The distinction matters because replacing a failed guard, for example, is different from creating a control for a hazard that the procedure never recognized.

Record both conditions when they coexist. A procedure may require a spotter, while the work design makes a stable line of sight impossible. A supervisor may verify a permit, while the permit does not define who controls an adjacent energy source. The evidence-gap test is useful when a report appears complete but does not explain why the control was unavailable in real work.

Step 6: Test the work-as-planned against work-as-performed

Compare the written sequence with the sequence people actually followed. Note the work that was added, skipped, improvised, delayed, or transferred between roles. The difference is not automatically misconduct. It may reveal a procedure that does not fit the equipment, the time window, the access route, or the competence available on that shift.

Ask the person doing the work to demonstrate the point at which the plan stopped matching reality. This keeps the review specific. A generic statement that “conditions changed” does not tell the decision owner which design, staffing, supervision, or control change is necessary.

Step 7: Build an evidence matrix before assigning actions

List each important conclusion beside the evidence that supports it, the evidence that is missing, and the person who can obtain it. Use photos, equipment logs, permit records, training records, interviews, measurements, and direct field checks according to the question being tested. Evidence is not interchangeable, because a signed record cannot prove a physical condition that nobody verified.

Keep assumptions visible. If the team believes that a valve was closed, mark that as an assumption until the position, lock, isolation boundary, and verification method are confirmed. A short timeline and evidence map can prevent the first plausible explanation from becoming the official explanation.

Step 8: Convert findings into control decisions

Do not end the review with “retrain the team” unless the evidence shows that knowledge was the controlling failure. Decide whether the work needs a design change, an isolation change, a boundary change, a staffing or supervision change, a procedure rewrite, or a pause until a missing control is available.

Give each decision an owner with authority over the relevant work. A recommendation assigned to EHS without access to engineering, maintenance, procurement, or production authority is not a control decision. The action ownership review helps distinguish a named recipient from a person who can actually change the exposure.

Step 9: Set the restart and learning boundary

Define what must be true before similar work restarts, who verifies it, and what evidence closes the decision. Include a trigger for reopening the review when the task, equipment, crew, contractor, location, or control changes. A calendar deadline alone is weak because the risk can change before the meeting occurs.

Share the result with the people who face the exposure, using the actual control change rather than a slogan about awareness. The high-potential near-miss stand-down is effective when it gives the field a clear answer about what changed, what remains uncertain, and who can stop the work if the boundary is lost.

Final checklist for a decision-ready review

Before closing the review, confirm that the record answers each question below.

  • What observable event exposed the person, asset, or environment?
  • What credible high-consequence outcome was possible?
  • Which control should have interrupted the exposure?
  • Was the control failed, missing, unsuitable, or not verified?
  • What evidence supports the conclusion, and what remains unknown?
  • Which decision owner can change the work before recurrence?
  • What must be verified before similar work restarts?

If the review cannot answer those questions, it is not ready to close. A near miss becomes useful when the organization changes a decision, a barrier, or a work condition while the evidence is still connected to the exposure.

Explore more safety and leadership conversations on the Headline Podcast.

Topics incident investigation high-potential near miss evidence review control decisions safety leadership headline podcast

Frequently asked questions

What makes a near-miss review decision-ready?
It connects the observable event to a credible serious outcome, identifies the control that should have interrupted the exposure, shows what the evidence proves, and assigns a person with authority to change the work.
Should every high-potential near miss trigger a full investigation?
The depth should match the credible consequence, uncertainty, and recurrence potential. A high-potential event requires enough evidence to test the control path, even when the visible outcome was minor.
Why separate failed controls from missing controls?
A failed control existed but did not perform its intended function, while a missing control was unavailable or never designed for the exposure. The corrective decision is different in each case.
What evidence should an investigation collect?
Collect evidence that answers the specific question, such as photographs, equipment logs, permits, interviews, measurements, training records, and direct field checks. A signed record cannot prove a physical condition that nobody verified.
When can similar work restart?
Restart when the required control changes are complete, the responsible person verifies them at the point of work, and the review states what conditions or changes would require the decision to be reopened.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI