Clause 10.2 of ISO 45001:2018 is one of the most operationally important elements of the standard. It governs how organizations investigate incidents (including near misses), manage nonconformities identified through audits and inspections, and implement corrective actions to prevent recurrence. This clause treats every incident and nonconformity as an opportunity for improvement.
What the Standard Requires
When an incident or nonconformity occurs, the organization must react in a timely manner to control and correct it and deal with consequences, evaluate the need for corrective action to eliminate root cause(s) so it does not recur or occur elsewhere, review existing assessments of OH&S risks and other risks as appropriate, determine and implement needed action (including corrective action) using the hierarchy of controls, review effectiveness of corrective action taken, and make changes to the OHSMS if necessary.
Incident Investigation
Best Practices for Investigation
- Investigate all incidents including near misses — near misses are free lessons
- Use incident management software for consistent reporting, investigation, and tracking
- Apply root cause analysis methodologies (5 Why, fishbone diagrams, fault tree analysis)
- Involve workers in investigations — those closest to the work understand the contributing factors
- Focus on systemic causes, not individual blame
- Complete investigations promptly while evidence and memories are fresh
Corrective Action
Best Practices for Corrective Action
- Address root causes, not just symptoms or immediate causes
- Set deadlines for corrective actions and track completion
- Verify effectiveness of corrective actions after implementation (not just completion)
- Share lessons learned across the organization to prevent similar incidents elsewhere
- Consider whether changes to the OHSMS (procedures, training, controls) are needed
- Create a culture where reporting near misses is encouraged and recognized
Common Pitfalls
- Stopping at the immediate cause rather than digging to root causes
- Not following up to verify corrective action effectiveness
- Failing to share lessons learned beyond the immediate work area
- Creating a punitive culture that discourages incident and near-miss reporting
