Minor Incidents and Near Misses

Minor incidents and near misses are events that did not become major incidents, either because their service effect was limited or because a control, a workaround, or good fortune prevented a wider failure. They still deserve a proportionate record, because they are often the earliest sign of a weakness that will later cause a major incident. A short entry that captures what happened, what stopped it spreading, and whether any follow up is needed is usually enough. The aim is not to report every minor event to an authority, but to keep a record inside the firm that can be reviewed for patterns.

A near miss is an event that could plausibly have become a major incident but did not, because of a safeguard or because of luck. Examples include a fault that was caught by monitoring just before it reached customers, a provider outage that coincided with low customer activity, or a change that was rolled back before it affected a live service. The distinction between a safeguard and luck matters, because a near miss stopped by a control is reassuring in a way that a near miss stopped by chance is not. Recording which of the two applied helps the firm judge whether its defences worked or whether it was fortunate, and fortune is not a control that can be relied on next time.

Proportionate recording means a short, structured entry rather than a full incident report. The entry should name the service, the event, the effect, the reason it did not spread, and any action taken or proposed. It should be quick to write, or staff will stop writing it, and it should be stored where it can be searched later. A firm that demands a lengthy form for every minor event will get fewer records, not better ones, because the burden will discourage reporting. A firm that asks for a few lines, and shows that those lines are actually read, will usually get a steadier flow of useful information. The test of a minor incident system is not how many forms it generates, but whether anyone reviews them.

Patterns emerge when minor events are reviewed together, rather than one at a time. A single minor fault on a service may mean little, but repeated faults on the same service, the same component, or the same provider point to a weakness that deserves attention. A review that groups minor events by service, by cause, and by provider will often reveal a cluster that individual incident handlers missed, because each handler saw only their own event. That review does not need to be frequent to be useful, but it does need to be regular, owned by a named person, and followed by actions where a pattern is found. Without that review, minor incident records accumulate as an archive that nobody reads, which is little better than having no records at all.

Minor incidents and near misses are only recorded if staff believe that reporting them is safe and useful. If staff fear blame for reporting a near miss, or if they believe their reports disappear into a system that never responds, they will stop reporting. Leaders can encourage reporting by thanking staff for near miss reports, by acting visibly on the patterns found, and by separating the discussion of what happened from any discussion of individual fault. That separation is easier to promise than to practise, especially when a near miss involved a mistake, but it is essential. A firm that punishes near miss reporting will learn about its weaknesses only when they become major incidents.

Minor events relate to major incidents as early warnings, not as predictions. Not every minor fault will grow into a major incident, and treating every one as a crisis would exhaust the firm. The value lies in the aggregate picture. When the same weakness appears repeatedly in minor form, the firm has a chance to fix it before the circumstances align for a major failure. That chance is the main reason to record minor events at all. A firm that reviews its minor incidents well is not merely being tidy. It is using the cheapest form of learning available, because a minor incident teaches a lesson without the customer harm, the authority report, and the board attention that a major incident brings.