Incidents in companies, although undesirable, do happen. Therefore, it is important to learn from them in order to prevent future similar occurrences, regardless of their real consequence and, especially with those whose real consequence was insignificant, but which had the potential to cause a greater loss. To learn from incidents it is necessary to investigate their occurrence by identifying what happened, how it happened and why it happened. In other words, it is necessary to identify the causes. Increasingly, companies involve supervisors, managers and other roles in incident investigation teams. Therefore, it is essential to develop this skill so that the results of investigations are assertive and convergent, regardless of the group investigating the incident. This course prepares you to conduct an incident investigation. Obtaining homogeneous and uniform results requires the adoption of a process. The incident investigation process was called Ritual. The course presents the process or ritual of an incident investigation, from the event reporting stage, through the definition of the investigation group, planning the investigation, data collection, organization and analysis of data, to the preparation of the action plan. action, from the investigation report, to the follow-up of the action plan. It presents several data organization and analysis techniques such as Event Schedule, Timeline, Change Analysis, Barrier Analysis, Cause-Effect Diagram, 5 Why Analysis and adds a simple behavior analysis tool, based on ABC theory - Antecendents, Behavior & Consequence.