Incident Investigation

Incident Memory: 5 Distortions Investigators Still Believe

Incident memory breaks under pressure, so investigators need separate interviews, clean sequencing, and scene evidence before they turn a story into a finding.

By 7 min read
investigative scene on incident memory 5 distortions investigators still believe — Incident Memory: 5 Distortions Investigato

Key takeaways

  1. 01Incident memory is fragile, so the first job is to separate witnesses before the story starts to contaminate itself.
  2. 02A clean interview note is not proof of truth. It is only proof that the investigator wrote something down.
  3. 03The field question should be root-cause what, not root-cause who, because blame narrows learning before the evidence is complete.
  4. 04Andreza Araujo's book *Sorte ou Capacidade* treats accidents as systemic, which is why memory should be checked against scene facts, not treated as the only record.
  5. 05A good investigation keeps witness accounts, timeline work, and control evidence in the same room until the story is stable.

Incident memory is not a recording device. It is a living account that changes with stress, interruption, cleanup, and the questions people hear around it. On Headline Podcast, Tim Page-Bodoff's root-cause what not who message, Dr. Thomas Krause's warning about system decisions, and Andreza Araujo's view that accidents are constructed make the same point from different angles. If you want learning, you need sequence control before you need certainty.

That is why investigators should stop treating witness memory as a neutral container. In more than 250 cultural transformation projects, Andreza Araujo has seen the same pattern repeat, the team wants a fast answer, yet the fast answer is usually the one that has already been edited by fear, hierarchy, or group discussion. As she writes in Sorte ou Capacidade, the accident is systemic, not random, which means the story must be checked against the work, not only against the person who told it.

On Headline Podcast, Michael Emery noted that the fix has to come from the department that runs the work, or it will not last. That matters here because the first-hour investigation is not a paperwork exercise. It is a control exercise. If the scene, the timeline, and the interview flow are weak, the final report may sound polished while still missing the real failure point.

Key Takeaways

  • Incident memory is fragile, so investigators need separate interviews and quick capture of the first independent version.
  • Group discussion can contaminate witness detail before the team knows it has happened.
  • The best investigation question is root-cause what, not root-cause who.
  • Andreza Araujo's Sorte ou Capacidade supports the systemic view, which keeps the investigation anchored in evidence instead of blame.
  • Good investigations keep witness statements, timeline work, and control evidence aligned until the sequence makes sense.

Why incident memory breaks under pressure

Memory changes because the brain is trying to make sense of a disruption while the worksite is already changing around it. People hear alarms, see others moving, absorb the mood of the room, and then reconstruct the sequence from fragments. That is not dishonesty. It is how human recollection behaves when the event is messy and the stakes are high.

James Reason remains useful here because latent conditions often shape what the witness believes happened before the investigator arrives. If the work was already full of hurried handovers, weak supervision, or unclear ownership, the witness may describe the event accurately and still miss the deeper cause. That is why a memory-only investigation creates a shallow report, even when everyone acted in good faith.

For a practical companion, compare this article with How to Build an Incident Timeline in the First 24 Hours and Incident Evidence Preservation: 7 First-Hour Controls. Both are built on the same rule, the sequence must be protected before the story starts to drift.

Myth 1: If two witnesses agree, the story is true

Agreement feels reassuring, but it can simply mean that one witness heard the other first. Group discussion is the fastest way to manufacture confidence without improving accuracy. Once that happens, the investigator is no longer comparing independent accounts. The team is comparing versions of the same version.

The stronger move is separation. Ask each witness for an individual first pass, then compare the accounts for overlap, gaps, and contradictions. The point is not to force disagreement. The point is to preserve the original signal before social pressure turns it into consensus.

I don't think we should do a root-cause who. I think we should do a root-cause what.

Myth 2: The first statement is the full statement

The first statement is valuable because it is fresh, but fresh is not the same as complete. Under stress, people often capture the most vivid part first, then fill in the missing sequence later when the investigator asks better questions. That is why the first version should be treated as a starting point, not as the final truth.

Dr. Thomas Krause has pointed out on Headline Podcast that events often look like employee fault until you trace them back to earlier decisions made long before the incident. The first statement usually captures the last visible link, while the real failure lives higher up the chain. If you stop at the first statement, you stop at the wrong layer.

The companion article Root-Cause "What," Not "Who": 5 Investigation Habits That Keep Your Team Talking goes deeper on this, because a complete statement only matters when it still points toward a system question.

Myth 3: A delayed interview is still good enough

Delay is not neutral. The scene changes, the crew talks, a supervisor fills the silence with their interpretation, and by the time the investigator arrives the witness may be answering a second-hand story. Even if the witness is sincere, the account now carries extra noise.

That is why the first hour matters. Not because every detail is perfect, but because the original version is most likely to be the least contaminated. As Andreza Araujo keeps emphasizing in her books and on the show, compliance theater is easy. Truth under pressure is harder. The timeline has to be protected while the work is still visible.

If you want the operational version of that argument, review How to Build an Incident Timeline in the First 24 Hours. The timeline is not decoration. It is the backbone that keeps the interview from becoming a guess.

Myth 4: The calmest witness is the most reliable one

Calmness can mean clarity, but it can also mean shock, distance, or a deliberate decision to stay brief because the person does not trust the room. A very emotional witness may be accurate. A very calm witness may be accurate too. Affect is a weak proxy for truth.

On Headline Podcast, the interview theme keeps coming back to ask, do not tell. If the investigator pushes too fast, they will hear the explanation they prompted, not the memory the witness actually has. The better path is open questions, pauses, and sequence checks that let the witness build the account in their own order.

That is also why line managers should not treat a quiet witness as a closed case. If the person is silent, the manager should ask what made the room hard to trust. Silence is a signal, not a conclusion.

Myth 5: Memory can stand alone without scene facts

It cannot, because memory tells you what people experienced, while scene facts tell you what the work allowed. A witness may remember the noise, the pace, the surprise, and the fear, but only the scene shows whether the control was missing, bypassed, or already failing. One account without the other leaves too much room for imagination.

That is the point Andreza Araujo keeps making in A Ilusão da Conformidade. A tidy story can hide a messy system. If the report relies only on memory, it may satisfy the form while failing the work. That is not learning. It is an administrative version of closure.

Compare the three layers in this table:

Evidence layer What it gives you What it can miss
Witness memory Human sequence, perception, fear, and immediate meaning Contamination, incomplete sequence, and social influence
Timeline Order, timing, and where the account starts to drift Physical proof if the scene has already been disturbed
Control evidence Whether the barrier actually existed and worked How the people involved experienced the event in real time

What to do now

Start with witness separation, then capture the first account, then map the sequence against the scene. If those three steps are not in the same workflow, the investigation will drift toward whichever source is loudest. A good line manager can run that check without turning the process into bureaucracy.

Use this short field test on the next serious event. Did we protect the scene before the conversation spread? Did we interview people separately? Did we compare memory against control evidence before writing the finding? If the answer to any of those is no, the report should stay open.

That is the practical version of root-cause what, not root-cause who. It is also the difference between a report that records the event and a report that helps the department change the work. For more Headline context, the same logic appears in Five Whys for SIFs: 6 Investigation Traps and Incident Evidence Preservation: 7 First-Hour Controls.

FAQ

Why is incident memory so unreliable during an investigation? Incident memory changes under stress, hurry, cleanup pressure, and social influence. The account can still be useful, but only when investigators isolate witnesses, capture the first version quickly, and test it against physical evidence.

Should investigators interview witnesses together? No. Group discussion can contaminate detail, because one person's version often becomes the template for everyone else. Separate interviews protect the earliest independent version of the event.

Is the first statement always the best statement? It is the first version, not the complete one. The first statement is valuable because it is fresh, but it still needs follow-up questions, sequence checks, and scene evidence before anyone treats it as settled fact.

What should come first after an incident? Protect the scene, separate witnesses, and start a timeline. That order keeps the investigation from drifting into a story built from cleanup, rumor, or the loudest voice in the room.

How does this help the line manager? It gives the line manager a better question than who did it. The manager can ask what happened, what changed in the work, and what evidence confirms the control failure.

Headline Podcast exists for this kind of conversation, the one that turns a witness story into a working understanding of risk. If you want the next step, keep the timeline close, keep the evidence separate, and keep asking what changed in the work.

Topics incident-investigation witness-memory incident-timeline evidence-control headline-podcast root-cause-what-not-who James Reason

Frequently asked questions

Why is incident memory so unreliable during an investigation?
Incident memory changes under stress, hurry, cleanup pressure, and social influence. The account can still be useful, but only when investigators isolate witnesses, capture the first version quickly, and test it against physical evidence.
Should investigators interview witnesses together?
No. Group discussion can contaminate detail, because one person's version often becomes the template for everyone else. Separate interviews protect the earliest independent version of the event.
Is the first statement always the best statement?
It is the first version, not the complete one. The first statement is valuable because it is fresh, but it still needs follow-up questions, sequence checks, and scene evidence before anyone treats it as settled fact.
What should come first after an incident?
Protect the scene, separate witnesses, and start a timeline. That order keeps the investigation from drifting into a story built from cleanup, rumor, or the loudest voice in the room.
How does this help the line manager?
It gives the line manager a better question than who did it. The manager can ask what happened, what changed in the work, and what evidence confirms the control failure.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI