Epidemiology Concept

Disease Outbreak Investigation — 10-Step Protocol

By Dr. Sonu Lakeshar

An outbreak is the occurrence of disease cases in excess of what is normally expected in a defined community, geographical area, or season. Investigating an outbreak follows a systematic 10-step protocol developed by WHO and CDC. The protocol balances epidemiological rigour with the urgency of controlling spread — every step is designed to be done quickly enough to inform real-time public health action.

On This Page
  1. Overview
  2. 10 Steps
  3. Epidemic Curve
  4. Attack Rate
  5. FAQs

Outbreak investigation is one of the most distinctive activities of field epidemiology. Unlike chronic disease research, outbreak investigation is done under time pressure — every day of delay means more cases and potentially more deaths. The objectives are: (1) identify the causative agent and source, (2) implement control measures to stop the outbreak, (3) prevent future outbreaks by addressing root causes, (4) generate new knowledge about disease transmission.

An outbreak is defined as the occurrence of disease cases in excess of what is normally expected. When an outbreak affects multiple countries or continents, it is called a pandemic (e.g., COVID-19). When an outbreak is limited to a single building, ward, or village, it is called a cluster. A common source outbreak arises from exposure to a common contaminated source (water, food); a propagated outbreak spreads person-to-person; a mixed outbreak has both patterns.

  1. Verify the diagnosis: Confirm the diagnosis using laboratory tests. Review clinical features, laboratory reports, and case histories. Rule out laboratory error, pseudoutbreaks.
  2. Confirm the outbreak: Compare current case count with baseline surveillance data from the same period in previous years. A 2-fold increase above baseline is suggestive.
  3. Define a case: Develop a standard case definition with clinical criteria + epidemiological criteria + time/place/person restrictions. Classify as confirmed, probable, or suspected.
  4. Find cases systematically: Active case finding through healthcare facilities, household surveys, school records, death registers. Use the case definition to include/exclude.
  5. Conduct descriptive epidemiology: Characterise cases by time (epidemic curve), place (spot map), and person (age, sex, occupation, risk factors). This step generates hypotheses.
  6. Develop hypotheses: Based on descriptive epidemiology, formulate hypotheses about source, mode of transmission, and exposure events.
  7. Evaluate hypotheses: Test hypotheses using analytical epidemiology — case-control or cohort studies. Calculate odds ratio (OR) or relative risk (RR).
  8. Refine hypotheses & carry out additional studies: If initial hypotheses are not supported, refine and conduct environmental investigation, food testing, microbiological subtyping.
  9. Implement control & prevention measures: Initiate control measures as soon as the source/mode is identified — recall contaminated food, chlorinate water, vaccinate contacts, isolate cases. Don't wait for full confirmation.
  10. Communicate findings: Prepare an outbreak report. Communicate to public health authorities, healthcare providers, and the public. Submit to peer-reviewed journal if findings are novel.

The epidemic curve (epi curve) is a histogram of cases by date/time of onset. It provides critical information:

  • Pattern of spread: Point source — sharp peak with rapid fall (e.g., food poisoning at a wedding); continuous source — plateau (ongoing contamination); propagated — successive peaks with each generation (person-to-person); mixed — combination
  • Time of exposure: For point source outbreaks, subtract the minimum and maximum incubation periods from the first and last case onset times to estimate exposure window
  • Outbreak stage: Rising, peak, declining — determines if control measures are working
  • Generation time: Interval between onset of primary case and secondary case — useful for estimating R0 (basic reproduction number)

Attack rate (AR) is the proportion of exposed persons who develop disease. Used in outbreak settings to compare risk between exposure groups:

  • Overall attack rate: Total cases / Total population at risk
  • Food-specific attack rate: Of people who ate food X, what % became ill?
  • Attack rate ratio (relative risk): AR in exposed / AR in unexposed. RR > 1 suggests the exposure is a risk factor.
  • Odds ratio (in case-control studies): (Cases exposed / Cases unexposed) ÷ (Controls exposed / Controls unexposed)

Example: At a wedding, 80 of 200 people who ate chicken developed diarrhoea (AR = 40%), and 5 of 100 people who didn't eat chicken developed diarrhoea (AR = 5%). Relative risk = 40/5 = 8 — those who ate chicken had 8 times the risk. Chicken is the likely vehicle.

What are the 10 steps of outbreak investigation?
1) Verify diagnosis, 2) Confirm outbreak (compare to baseline), 3) Define a case, 4) Find cases systematically, 5) Descriptive epidemiology (time/place/person), 6) Develop hypotheses, 7) Evaluate hypotheses (case-control/cohort), 8) Refine hypotheses and conduct additional studies, 9) Implement control measures, 10) Communicate findings.
What is the difference between outbreak, epidemic, and pandemic?
Outbreak: sudden increase in cases in a defined community/area (e.g., measles in a school). Epidemic: larger geographic scale increase above expected (e.g., dengue epidemic in a city). Pandemic: an epidemic that has spread across multiple countries or continents (e.g., COVID-19, 1918 influenza). Cluster: a small localised group of cases.
What is an epidemic curve?
A histogram of cases by date/time of onset. It reveals the pattern of spread (point source, continuous source, propagated, mixed), the outbreak's stage (rising, peak, declining), and helps estimate the time of exposure (for point source outbreaks, subtract incubation period from first case onset). It also reveals generation time between primary and secondary cases.
What is attack rate?
The proportion of exposed persons who develop disease during an outbreak. Calculated as: number of cases / number of people at risk. Used to compare risk between exposure groups (e.g., people who ate chicken vs those who didn't). The ratio of attack rates (relative risk) identifies the likely source.
When should control measures be implemented during outbreak investigation?
As soon as the source or mode of transmission is identified — do NOT wait for full confirmation. Step 9 of the protocol explicitly states that control measures should be initiated as soon as enough evidence is available, even if some steps (like analytical epidemiology) are ongoing. Delaying control measures costs lives.

Outbreak investigation is the operational art of field epidemiology. For UPSC CMS aspirants, the 10-step protocol, the epidemic curve interpretation, and the attack rate calculation are highly testable PSM topics — and operationally, every district-level Medical Officer will encounter at least one outbreak during their career.

🎓 Explore More on CMS Prep
CMS Prep covers UPSC CMS previous year questions, NEET PG, INICET, FMGE, AFMS, and complete careers-after-MBBS guidance — all free, no login.