How do risk assessment and incident investigations integrate in safety management?

• A. Investigations identify causes; risk assessment prioritizes actions; combine to determine severity, probability, and controls to mitigate risk.
• B. Risk assessment replaces investigation findings in determining root cause.
• C. Investigations ignore risk assessment when prioritizing actions.
• D. Risk assessment and investigations operate independently with no overlap.

Answer: (A)

When safety management works well, investigations and risk assessment feed a single learning loop. Investigations dig into what happened, uncovering root causes, failures in barriers, human factors, equipment issues, and conditions that allowed the incident to occur. Risk assessment takes those findings and evaluates how bad the risk is by considering severity (how serious the outcome could be), probability (how likely it is to recur), and how effective current controls are. By bringing these together, you can prioritize actions based on actual risk and decide which controls to implement, such as engineering changes, revised procedures, training, or additional safeguards.

This integration also supports a continuous improvement cycle: after implementing controls, you reassess risk and monitor effectiveness, then adjust as needed. The approach ensures learnings from the investigation translate into prioritized, evidence-based mitigations that reduce future risk.

Why the other ideas don’t fit: risk assessment does not replace investigation findings; root-cause data is essential for understanding what to fix. Investigations should not ignore risk assessment when prioritizing actions, since risk levels guide which issues warrant the most urgent attention. And these activities are not truly independent; they overlap and inform one another to drive safer operations.