Using a Safety-II framework, the authors used a mixed-methods approach to retrospectively analyze root cause analysis (RCA) reports of ‘never events’ occurring in the United Kingdom to characterize proposed actions, insights and recommendations to prevent future events. The analysis found that proposed actions were generally of low-to-moderate effectiveness, and that despite identifying systems challenges and weaknesses, many reports did not include proposed actions to mitigate or remove risks. The authors conclude that applying concepts from resilient healthcare can identify vulnerabilities and opportunities for strengthening the RCA system and improving the quality of RCA reports.