If you’ve ever been tasked with investigating a workplace incident, you’ll know how overwhelming it can feel. Where do you start? How do you make sure nothing gets missed? And most importantly, how do you turn findings into real change?
That’s where the ICAM investigation process comes in. Built on the ICAM methodology - a globally recognised system used across high-risk industries - it provides a clear, structured way to break down incidents and identify contributing factors. And it’s helping organisations globally learn how to respond to incidents while also building stronger safety systems that reduce the risk of these events from reoccurring.
In this guide, you’ll discover exactly how the ICAM investigation process works, step by step. By the end, you’ll see how it can make your workplace safer, more compliant, and more resilient.
Investigating a workplace incident isn’t just about ticking a compliance box - it’s about uncovering the real reasons behind what went wrong so you can mitigate the risk of it happening again.
The ICAM investigation process is a structured way to examine workplace incidents, establishing not only what happened but why. It’s based on the ICAM methodology (Incident Cause Analysis Method), which looks beyond the immediate event and digs into the contributing factors that led to it and how to mitigate future recurrence of similar events.
Think of it this way: most incidents aren’t caused by a single mistake. They’re usually the result of multiple layers of issues - from human factors and organisational processes to environmental conditions and equipment. ICAM gives you a framework to identify and connect these factors, so you can see the full picture instead of just the surface-level problem.
The strength of the ICAM investigation methodology and process lies in its ability to go beyond surface-level explanations and deliver meaningful outcomes. The approach offers multiple benefits to Australian workplaces:
So, how does the ICAM process work in practice? When carrying out an ICAM investigation at work, there are eight steps you’ll follow:
The priority after an incident is to ensure the safety of people and the site. This involves initiating an immediate emergency response, securing the area to mitigate further harm, and appointing qualified investigators to manage the process. Clear and timely notifications should be sent to all relevant stakeholders, ensuring everyone is informed and the response is coordinated from the outset.
Once the immediate response is complete, the next step is to establish a clear investigation plan. This includes confirming the investigation team, setting out logistics such as roles, responsibilities, and schedules, and creating a framework for managing records and logs. Effective planning also covers how information and evidence will be collected, stored, and reviewed to ensure accuracy, consistency, and accountability throughout the investigation process.
A vital part of any investigation is preparing to gather information from the people involved. This means developing a structured plan to identify who needs to be interviewed, what information is required, and the best way to approach each person. Careful planning ensures that interviews are conducted respectfully, consistently, and in a way that captures accurate insights to support the overall investigation.
With the plan in place, the investigation moves into the collection stage. Using the PEEPO framework (People, Environment, Equipment, Procedures, and Organisation), investigators gather, review, and validate all relevant information and evidence. This process helps ensure accuracy and completeness while reducing the risk of assumptions or gaps. From this material, a basic timeline of events can be developed, providing a clear foundation for deeper analysis in later stages.
Using the ICAM framework’s four categories—Absent/Failed Defences, Individual/Team Actions, Task/Environmental Conditions, and Organisational Factors—review each item gathered during PEEPO collection. For every piece of information, read the category definition and apply the check questions to decide where it belongs. Start on the far right with Absent/Failed Defences and work left across the framework to minimise bias and double-counting. Document each contributing factor with its supporting evidence and link it to the developing timeline.
After identifying the contributing factors through ICAM analysis, the investigation team develops recommendations to address them. Each recommendation should directly link back to a contributing factor and aim to mitigate recurrence by strengthening systems, processes, or defences. Recommendations should be clear, achievable, and prioritised, providing organisations with a roadmap for meaningful improvement and safer outcomes.
The final stage of the investigation is to document and communicate the findings. This involves completing the investigation report(s), ensuring they are clear, accurate, and supported by evidence. The report should outline the incident timeline, contributing factors, and recommendations, providing a structured record for stakeholders. Where appropriate, the team should present the findings to management and other relevant parties, ensuring transparency and creating a foundation for action and continuous improvement.
Now that you understand the ICAM investigation process step by step, you should feel more confident about putting these actions into practice in your own workplace. But confidence doesn’t mean you have to do it all alone. That’s where expert support can make a big difference – particularly when incidents are complex, sensitive, or high-stakes.
Here’s how ICAM Australia can help.
Our team provides hands-on investigation support for businesses that need immediate assistance after an incident. Having an experienced investigator involved ensures nothing is overlooked, the process remains objective, and the final report becomes a trusted foundation for learning, improvement, and stronger safety outcomes
For workplaces wanting to strengthen their internal capability, ICAM Australia offers tailored training packages. These equip WHS personnel with the knowledge and skills to confidently conduct ICAM investigations in-house. Training is particularly useful for organisations looking to build long-term resilience and reduce reliance on external help.
You don’t need to wait for a major incident to bring in experts. Many businesses use consultancy and training proactively to reduce risks before issues escalate. Whether you’re reacting to an incident or planning ahead, external support ensures your team has the tools and confidence to manage investigations effectively.
A well-run ICAM investigation doesn’t just close the loop on one incident. It lays the foundation for a safer, smarter, and more productive workplace.
The ICAM investigation process gives you a clear, structured way to understand incidents and mitigate them from happening again – helping you to strengthen compliance, reduce risks, and build a safer culture.
Whether you’re dealing with an incident right now or preparing for the future, knowing how the process works puts you in a stronger position. And when you need extra support, ICAM Australia is here to help - from leading investigations to training your team so they can manage safety with confidence.
Keen to know more about the ICAM methodology, process and your support options? Contact the team at ICAM Australia today.