Safety
How to Choose Between Simple, Epidemiological, and Systemic Investigation Methods
A practical guide to selecting the right incident investigation method based on complexity, expertise, and the depth of causal analysis required.
Published July 13, 2026 · Author Marian Stratulat · Reading time 5 min read · Last updated July 13, 2026
Choose the method based on incident complexity, available expertise, and how deep you need to go in finding underlying causes. For small and medium-sized companies in the EU, a simple method is often enough for minor, straightforward incidents, while epidemiological or systemic methods are better when the event is serious, recurring, or clearly influenced by multiple factors.
Our guides provide general educational information. Requirements vary by country, industry, and organization. Always verify applicable legislation, standards, and professional requirements.
Why this topic matters
- Not every incident needs the same depth of analysis — matching the method to the event saves time and produces better corrective actions.
- Serious, recurrent, or high-potential incidents require going beyond a simple event chain, because simple and epidemiological approaches may not fully capture complex causation.
- Choosing the wrong method wastes resources on minor cases and under-analyses serious ones, leaving latent risks in place.
Step-by-step process
- Assess the incident: severity, complexity, whether it is a one-off or a recurring pattern, and whether multiple technical and organizational factors interacted.
- Check available expertise and time — simple methods can be applied by supervisors or a small internal team, while systemic methods require more specialized training.
- Use a simple method when the incident is low complexity, well bounded, and can be understood quickly. EU-OSHA describes simple techniques as suitable for non-experts, typically taking only a couple of hours, and gives the Finnish model as an example.
- Use an epidemiological method when you need to identify multiple contributing factors, including latent conditions, barriers, and patterns across similar events. EU-OSHA notes these methods focus on simultaneous factors and hidden conditions, and links them to models such as the Swiss-cheese approach.
- Use a systemic method when the incident is complex, involves interacting technical and organizational factors, or could reflect broader system design issues. EU-OSHA names AcciMap, FRAM, and STAMP as examples suitable for modern sociotechnical systems.
- In practice, combine methods when useful: build a timeline or event chain for the facts, then add an epidemiological or systemic lens for causes and controls.
Roles and responsibilities
- Supervisors and small internal teams — can lead simple investigations of minor, well-bounded incidents with limited formal training.
- Safety specialists or trained investigators — needed for epidemiological analysis of multi-factor or recurring events, including barrier and latent-condition analysis.
- Specialized investigators (internal or external) — required for systemic methods (AcciMap, FRAM, STAMP) on complex, cross-department, or high-consequence incidents.
- Employer — responsible for ensuring the chosen method matches the severity and complexity of the event, and that investigators have adequate time and authority.
Common mistakes
- Defaulting to a simple method for a serious or recurring incident and missing latent causes.
- Applying a heavy systemic method to a minor, well-bounded event and wasting time and expertise.
- Stopping at the immediate cause when barrier failures and organizational factors clearly contributed.
- Ignoring patterns across similar past incidents that would point to an epidemiological approach.
- Assigning a systemic investigation to people without the required training, producing a superficial analysis under a complex label.
- Treating the timeline or event chain as the whole investigation instead of a starting point for deeper causal analysis.
Practical recommendations
- Simple method — for minor, one-off incidents with an obvious causal chain and local corrective actions.
- Epidemiological method — for recurring incidents or events with several contributing factors, barrier failures, or long-term contributors.
- Systemic method — for serious, high-complexity, or cross-system incidents involving multiple departments, contractors, or layers of decision-making, and for events with major actual or potential consequences.
- Combine a timeline or event chain with an epidemiological or systemic lens when facts and causes need to be analyzed together.
- Match investigator expertise and time budget to the chosen method — do not upgrade the label without upgrading the analysis.
Documentation requirements
- Record which method was selected and why, referencing incident severity, complexity, and any recurrence pattern.
- For simple investigations: scene checks, witness interviews, chronological description, contributing factors, prevention measures, and follow-up.
- For epidemiological investigations: list of simultaneous contributing factors, barriers that failed or were missing, latent conditions, and links to similar past events.
- For systemic investigations: mapping of interactions between people, technology, procedures, management, and external constraints, plus identified weaknesses in the overall system.
- In all cases: corrective actions, owners, deadlines, and verification of effectiveness.
Key takeaways
- Simple methods are for minor, well-bounded cases.
- Epidemiological methods are for recurring or multi-factor cases.
- Systemic methods are for serious, high-complexity, or cross-system cases.
- A timeline or event chain can be combined with an epidemiological or systemic lens for a stronger investigation.
Sources
- EIGA incident investigation document — https://www.eiga.eu/uploads/documents/DOC090.pdf
- EU-OSHA OSHwiki — Accident investigation techniques — https://oshwiki.osha.europa.eu/en/themes/accident-investigation-techniques
FAQ
Marian Stratulat
Founder · sAuditor
Helping companies improve safety and quality processes through practical inspections and clear corrective-action management.