Summary
In short
- Campbell Institute and related research finds weak correlation between recordable injury frequency and serious injury and fatality events. A low recordable rate does not indicate that SIF exposures are controlled.
- SIF-potential incidents have different root causes and precursors from other incidents, which is why classifying by potential rather than outcome changes what the organisation learns.
- Only a small proportion of recordable injuries carry SIF potential, while many more SIF-potential exposures are found through observations and inspections than through injuries.
- The classification decision must be made at the point of reporting, because after an investigation concludes that nobody was hurt, the incentive to grade it seriously disappears.
- The useful focus is process factors and control failures rather than human error, which will always be present and is rarely the actionable finding.
- High-energy hazards are the practical filter: where the energy present could kill, the event has SIF potential regardless of what happened.
What it is
What it is
What is a serious potential incident?
An event which, under slightly different circumstances, would have resulted in a fatality or life-altering injury. It is classified by what could have happened rather than by what did, and it includes events with no injury and no damage at all.
What is a SIF precursor?
A condition or circumstance that, if left uncorrected, could lead to a serious injury or fatality. Precursors are typically the absence or failure of a control against a high-energy hazard, and research indicates they are found far more often through observation and inspection than through injury reporting.
When to use it
When to use it, and when not to
This record captures events by potential severity. It sits alongside rather than inside the general incident process.
Use it for
- Any event where the credible worst outcome was death or life-altering injury, regardless of actual outcome
- Control failures against high-energy hazards: falls from height, uncontrolled energy, vehicle interaction, engulfment, electrical contact
- Near misses that would routinely be logged and closed but carried serious potential
- Observations and inspection findings identifying an absent or defeated control against a high-energy hazard
- Any event that would have been serious but for position, timing or luck
Not for
- The general incident report, which records what happened and covers the full range of outcomes
- Root cause analysis, which follows this and requires a method proportionate to the potential
- Regulatory reporting determinations, which follow their own criteria based on actual outcome
- Insurance and claims records, which are driven by actual cost
- The corrective action record, which tracks the actions this generates
Standards
What it is built against
SIF classification is a management practice rather than a regulatory requirement, sitting within incident investigation obligations.
| Clause | Requirement | Where it lands |
|---|---|---|
| ISO 45001 cl.10.2 | Incident investigation to determine underlying causes and the need for corrective action | The event |
| ISO 45001 cl.6.1.2 | Hazard identification proactive and reactive, drawing on incidents and near misses | Follow up |
| ISO 45001 cl.9.1 | Monitoring and measurement with indicators appropriate to what is being managed | Escalation |
| 29 CFR 1904.39 | Reporting of fatalities and severe injuries within defined timescales, based on actual outcome | Escalation |
| ICMM guidance | Significant potential incident classification and critical control verification in mining | Event |
| ICAM methodology | Investigation method addressing absent or failed defences, individual and organisational factors | Follow up |
| ISO 45001 cl.8.1.2 | Hierarchy of controls, applied to the control failures this report identifies | Follow up |
| RIDDOR (GB) | Reportable dangerous occurrences, defined by event type rather than by injury outcome | Escalation |
What it does not cover
- The general incident report, which records the event and its actual outcome.
- Root cause analysis, which follows and should use a method proportionate to the potential rather than the outcome.
- Regulatory reporting, which is determined by actual outcome or by defined dangerous occurrence categories.
- Critical control verification, which checks that controls against fatal risks are present and effective.
- The corrective action record, tracking the actions arising to verified closure.
Filling it in
Filling it in well
Classify at the point of report, describe the control that failed, and investigate to the potential rather than the outcome.
Ask what the credible worst outcome was, not what happened. This has to be decided when the event is reported, because once an investigation establishes that nobody was hurt and nothing was damaged, the pressure to grade it seriously evaporates and the event becomes a routine near miss.
Falls from height, uncontrolled or stored energy, vehicle and pedestrian interaction, suspended loads, engulfment, electrical contact, confined space atmosphere. Where the energy present is sufficient to kill and a control was absent, defeated or failed, the event has serious potential whatever the outcome. This gives a consistent test rather than a judgement about how close it felt.
The research is explicit that focusing on process factors rather than human error produces the useful findings, because human error will always occur. The question is which control was supposed to prevent this, and whether it was absent, inadequate, defeated or simply not applied that day.
An event with fatal potential and no injury warrants the investigation depth of a serious injury, not the depth its actual cost suggests. This is the single most consequential decision in the process, and the one most frequently reversed by resourcing pressure once it is clear nobody was hurt.
Audit findings
Common audit findings
Findings here concentrate on classification and on what happens after it.
| Finding | Clause | What fixes it |
|---|---|---|
| Events classified by actual outcome rather than potential. | ISO 45001 cl.10.2 | Classify by credible worst outcome at the point of reporting. |
| Serious potential events investigated at the depth their actual cost suggested. | ISO 45001 cl.10.2 | Investigate to the potential; that is the entire purpose of the classification. |
| Low recordable rate presented as evidence that fatal risk is controlled. | ISO 45001 cl.9.1 | Report SIF-potential separately; the correlation between the two is weak. |
| Findings expressed as human error rather than control failure. | ISO 45001 cl.8.1.2 | Identify the control that should have prevented it; error is a starting point, not a cause. |
| Observations and inspections not used as a source of SIF precursors. | ISO 45001 cl.6.1.2 | Most SIF-potential exposure is found by looking, not by waiting for events. |
| No definition of what counts as serious potential, so classification is inconsistent. | ISO 45001 cl.10.2 | Define it with a high-energy filter and worked examples; calibrate the people classifying. |
| Classification downgraded during investigation once no injury was confirmed. | ISO 45001 cl.10.2 | Lock the classification at report; downgrading defeats the mechanism. |
| Actions from serious potential events tracked alongside minor ones with no priority. | ISO 45001 cl.10.2 | Separate the queue; these actions address fatal exposure. |
| Contractor events excluded from the classification process. | ISO 45001 cl.8.1.4 | Include them; contractor work frequently carries the higher-energy exposures. |
| No verification that the control identified as failed was subsequently effective. | ISO 45001 cl.10.2 | Verify at the point of work later; closure on paper is not effectiveness. |
Worked case
Case in point: the year the numbers improved
Research summarised by the Campbell Institute found that the traditional assumption, that reducing high-frequency low-severity incidents would reduce fatalities proportionately, does not hold. The correlation is weak, because most recordable injuries involve different hazard profiles, exposures and failure modes from the events that kill people.
The practical consequence is a pattern that recurs across industries: an organisation reduces its recordable rate substantially over several years, reports steady improvement, and experiences a fatality with no warning visible in the safety data. Nothing in the reporting was wrong. It was measuring a different thing.
Work reported through industry groups has found that only a small proportion of recordable injuries carry SIF potential, while considerably more SIF-potential exposures are identified through observations and inspections than through injuries at all.
Definitions
Definitions and key terms
- SIF
- Serious injury and fatality: death, permanent disability, or injury severe enough to permanently alter quality of life.
- SIF potential
- An event or condition that under slightly different circumstances would have produced a serious injury or fatality.
- Precursor
- A condition that, uncorrected, could lead to a SIF event, typically an absent or failed control against a high-energy hazard.
- High-energy hazard
- An energy source sufficient to cause death or life-altering injury: height, motion, electrical, thermal, chemical, pressure or gravity.
- Critical control
- A control whose failure would substantially increase the likelihood of a fatal event, warranting explicit verification.
- ICAM
- Incident Cause Analysis Method, addressing absent or failed defences alongside individual, task, environmental and organisational factors.
- Recordable rate
- A frequency measure of recordable injuries, which correlates weakly with fatal risk exposure.
- Classification at report
- Deciding potential severity when the event is reported, before the actual outcome influences the judgement.
FAQ
Frequently asked questions
Why not just use the near miss process?+
Because a general near miss process treats all events alike and volume buries the important ones. Research indicates SIF-potential incidents have different root causes and precursors from other incidents, so grouping them together means the analysis is dominated by events with a different failure profile. Separating them is what makes the pattern visible.
Does a falling injury rate mean fatal risk is falling?+
Not reliably. Campbell Institute and related research found weak correlation between high-frequency low-severity incidents and SIF events, because they involve different hazards, exposures and failure modes. Organisations routinely reduce recordable rates over years while their exposure to high-energy hazards is unchanged, and the reporting shows improvement throughout.
How do we decide what counts as serious potential?+
Use a high-energy filter rather than a judgement about how close it felt. Where the energy present, height, motion, electrical, thermal, pressure, was sufficient to kill, and a control was absent, defeated or failed, the event has serious potential regardless of outcome. That gives a consistent test that different people apply the same way.
Where do most SIF-potential exposures come from?+
Observation and inspection rather than incident reporting. Industry work has found that only a small proportion of recordable injuries carry SIF potential, while many more SIF-potential exposures are found by looking at work. An organisation relying on events to reveal fatal risk is watching the least productive source.
Why classify at the point of reporting?+
Because the classification will drift downward otherwise. Once an investigation confirms that nobody was hurt and nothing was damaged, the pressure to treat an event as serious disappears, and it becomes a routine near miss closed with a toolbox talk. Locking the classification at report is what preserves the investigation depth the potential warrants.
The agents
What the agents do with it
The report captures potential rather than outcome. What fails is the classification that drifted downward and the investigation sized to the actual cost.
Classifies at the point of report using a high-energy filter, locks the grading, and drives investigation depth from potential rather than outcome.
Brings observations and inspection findings into the same classification, since that is where most SIF-potential exposure is actually found.
Includes contractor events and exposures, which frequently carry the higher-energy work and sit outside site reporting.
Connects failed controls to the assets and work orders that restore them, and verifies effectiveness at the point of work rather than on paper.
This template lives in KnowSafe — safety and compliance. Incidents, hazards, permits, inspections and the critical controls behind them.
Meet KnowSafe→Sources
Sources
- Campbell Institute, Serious Injury and Fatality Prevention: Perspectives and Practices
- Campbell Institute, Designing Strategy for Serious Injury and Fatality Prevention
- ISO 45001:2018 clauses 10.2, 6.1.2 and 9.1
- ICMM critical control management good practice guidance
- 29 CFR 1904.39, reporting fatalities and severe injuries, OSHA