SERIOUS INCIDENT RESPONSE

Protect people. Preserve the scene. Secure the evidence.

CALL +27 81 324 3666
Knowledge libraryIncident responseK04
Incident response10 MINUTE READ24 LAW BRIEFING

What to Do in the First Hour After a Serious Workplace Incident

A structured first-hour response for rescue, isolation, scene preservation, reporting, evidence and management control after a serious workplace incident.

LAW SYSTEM EVIDENCE CONTROL

01 / WHY THIS MATTERS THE QUESTION BEHIND THE QUESTION

What to Do in the First Hour After a Serious Workplace Incident

The first hour is not the time to prove a theory. It is the time to protect life, prevent a second event and preserve the conditions from which reliable facts can later be established. Well-intentioned cleaning, moving equipment, group discussions and premature blame can permanently damage the investigation.

Response leadership should separate emergency control from investigation. Rescue and medical care come first. Once immediate danger is controlled, access, physical evidence, records and witness independence require deliberate protection.

THE 24 LAW LENSA document is only useful when it changes a decision, a control or the quality of evidence.

03 / SYSTEM LENS FROM WORDS TO WORK

The system behind the document.

A controlled scene has one access owner, one decision log and a clear boundary. Equipment states, isolation positions, guards, controls, weather, lighting, housekeeping and work in progress may all be evidence. Digital records can be equally perishable: CCTV can overwrite, messages can disappear and system logs can roll over.

Witnesses should be identified and supported without creating a shared version of events. Obtain initial factual accounts separately, avoid leading questions and record what the person saw, heard or did before seeking explanations.

01DUTYWhat must be achieved?
02OWNERWho has authority?
03CONTROLWhat changes exposure?
04EVIDENCEHow can it be proved?

04 / PRACTICAL METHOD A SEQUENCE MANAGEMENT CAN USE

Seven moves from uncertainty to control.

  1. 01

    Rescue and obtain emergency medical assistance

  2. 02

    Stop work and isolate residual energy or continuing exposure

  3. 03

    Account for people and prevent secondary casualties

  4. 04

    Establish a scene boundary and controlled access log

  5. 05

    Escalate internally and determine statutory or client notifications

  6. 06

    Secure CCTV, documents, permits, data and equipment records

  7. 07

    Identify witnesses and record an objective decision chronology

The sequence should be adapted to the organisation and repeated when people, scope, law, equipment or risk changes. Implementation is stronger when the responsible person is involved in designing the control rather than merely receiving the final document.

Implementation commentary

Begin by treating rescue and obtain emergency medical assistance, stop work and isolate residual energy or continuing exposure and account for people and prevent secondary casualties as connected decisions. The output of one step should become the input to the next. If teams complete them independently, different assumptions can survive inside the same system and later appear as a supervision, contract or compliance gap.

Ownership must follow authority. The person named against an action needs access to the information, budget, people and decision rights necessary to perform it. Where approval sits elsewhere, the escalation route and response time should be defined. This matters particularly when the risk crosses departments, contractors, legal entities or national borders.

Finally, implementation should be tested under normal work, change and pressure. A process that works only during a scheduled audit is not reliable. Sample recent decisions, speak to the people expected to use the control and test whether the records tell the same story as the operating environment.

05 / EVIDENCE WHAT A DEFENSIBLE FILE SHOULD SHOW

Evidence is the memory of the system.

Evidence should be proportionate, authentic and connected to the decision it supports. Six useful evidence classes for this topic are:

01Scene photographs and videoIt should identify the decision, responsible person, date and approved basis instead of existing as an isolated attachment.
02Access and decision logsIt should be current, attributable and capable of being checked against what people actually do in the workplace or transaction.
03CCTV and electronic dataIt should show the control before the problem, not only the paperwork produced after a complaint, audit or incident.
04Permits, risk assessments and instructionsIt should preserve version history so management can establish what applied at the relevant time and what later changed.
05Equipment condition and maintenance historyIt should connect the person performing the work with the instruction, authority, competence or approval relied upon.
06Independent witness accountsIt should demonstrate verification: who checked effectiveness, what they observed and how remaining weakness was escalated.

Quantity is not the objective. A smaller body of reliable, connected evidence is more valuable than a large file of unsigned, duplicated or untested material. Retention periods, confidentiality, access and cross-border transfer should be considered where personal, commercially sensitive or legally significant information is involved.

06 / FAILURE PATTERNS WHERE GOOD INTENTIONS COLLAPSE

Common mistakes worth finding early.

  • ×
    Restarting before the risk is understoodThis creates confidence without a reliable basis and can conceal the point where responsibility or control becomes unclear.
  • ×
    Moving evidence for convenienceThe weakness usually appears during change or pressure, when the team needs a decision rule and finds only a generic document.
  • ×
    Allowing unrestricted scene accessIt separates management’s record from operating reality, leaving the organisation unable to prove that the intended safeguard worked.
  • ×
    Interviewing witnesses as a groupIt often transfers uncertainty to the person with the least authority to resolve it and allows the underlying condition to remain.
  • ×
    Writing a cause before collecting factsThe apparent short-term convenience produces greater delay when customers, employees, auditors or regulators later test the arrangement.
  • ×
    Treating PPE failure as the complete explanationRepeated tolerance can normalise the gap until a serious event, dispute or enforcement process makes the consequence visible.

A repeated weakness should be treated as information about the management system. Correcting the individual document without understanding the conditions that produced it usually guarantees recurrence.

07 / MANAGEMENT TEST QUESTIONS FOR THE DECISION ROOM

Five questions that expose whether the system is real.

  1. 01
    Who has the authority and resources to rescue and obtain emergency medical assistance, and where is that responsibility recorded?

    Ask for the evidence, then test it against a recent real example. A confident verbal answer is useful context, but the organisation should be able to demonstrate the decision, control and follow-up without reconstructing them for the meeting.

  2. 02
    What would scene photographs and video prove to an independent reader who was not present when the decision was made?

    Ask for the evidence, then test it against a recent real example. A confident verbal answer is useful context, but the organisation should be able to demonstrate the decision, control and follow-up without reconstructing them for the meeting.

  3. 03
    How would management detect that “restarting before the risk is understood” was beginning to occur before the outcome became serious?

    Ask for the evidence, then test it against a recent real example. A confident verbal answer is useful context, but the organisation should be able to demonstrate the decision, control and follow-up without reconstructing them for the meeting.

  4. 04
    Which operational, legal or contractual change would require this system to be reviewed rather than carried forward unchanged?

    Ask for the evidence, then test it against a recent real example. A confident verbal answer is useful context, but the organisation should be able to demonstrate the decision, control and follow-up without reconstructing them for the meeting.

  5. 05
    When the control is marked complete, who will verify that identify witnesses and record an objective decision chronology has actually happened in practice?

    Ask for the evidence, then test it against a recent real example. A confident verbal answer is useful context, but the organisation should be able to demonstrate the decision, control and follow-up without reconstructing them for the meeting.

The purpose of these questions is not to create another audit ritual. They help leadership identify where the organisation depends on assumption, memory or one indispensable person. That dependency should be converted into a shared, documented and reviewable control.

08 / MANAGEMENT CONCLUSION THE SENTENCE TO TAKE INTO THE MEETING

A disciplined first hour protects people twice: first from the remaining hazard, and then from an investigation weakened by lost evidence and premature conclusions.
RELATED 24 LAW CAPABILITYRead about serious-incident response
Follow this path
Legal references and reading points

The application of law depends on the facts and jurisdiction. Useful official starting points include:

General information only. This article does not create a professional mandate and should not be relied on as matter-specific legal advice.