1. What is the first step on arrival at an incident scene?

2. Why do we take photos before touching anything?

3. Which notes are best?

4. What is the main aim of a witness interview?

5. Which question type is best to start an interview?

6. What should chain of custody show for a sample?

7. A good scene sketch should include at least:

8. When should you start collecting evidence?

9. What is “perishable evidence”?

10. Which order is best for scene photos?

11. A good interview setting is one that is:

12. What should you do if a witness seems upset or scared?

13. What is the best way to label collected parts or samples?

14. Which record helps most with time order (timeline)?

15. What is confirmation bias during evidence review?

16. When should you stop collecting evidence?

17. Which order is best for witness interviews?

18. What is the main risk of cleaning the scene too soon?

19. Which is the best way to handle digital evidence (CCTV files)?

20. Which item is least helpful at a scene?

21. What is the main goal of root cause analysis?

22. “5 Whys” is used to:

23. A barrier (control) that failed should be listed as a:

24. Which tool maps People, Equipment, Environment, Procedures?

25. Which is a “system” cause, not just a “human error” tag?

26. A good corrective action should be:

27. Which control is stronger?

28. Bowtie analysis helps you see:

29. What is a “root cause” best defined as?

30. Which data best supports a cause claim?

31. In a timeline, gaps in time often point to:

32. “Just Culture” means we should:

33. A weak action is often a:

34. Before naming a cause, you should check it with:

35. A “latent” condition is best described as:

36. Human factors include things like:

37. A good KPI for actions is:

38. What should you do if two causes conflict with each other?

39. Which tool helps sort causes by impact and control strength?

40. What should you do before closing the investigation?

41. A good executive summary should be:

42. What is the best way to write actions in a report?

43. Which metric is a “leading” indicator for learning?

44. What is a “lessons learned” note used for?

45. How should you track action close-out after a report is issued?

46. Which chart best shows events over time for trends?

47. When sharing a report, you should remove or limit:

48. Which is the best audience for a detailed technical root cause?

49. A close-out check should confirm that actions are:

50. What should a “no blame” summary avoid?

51. After a serious case, how soon should you share “interim” lessons (when safe)?

52. What makes a learning bulletin easy to use on site?

53. What should you include when reporting to a regulator (if required)?

54. To spread learning across sites, you should also:

55. Good KPIs for learning include (pick the best set):

56. Which is a good close-out verification method?

57. When should you update a report after new facts appear?

58. A good close-out meeting should confirm that teams:

59. What is the best way to keep learning alive after a year?

60. What should you do if a similar incident happens again?