THE RIGHT DOCUMENT FOR THE JOB
When to use a incident report
Use it for operational, safety, security, service, property, or customer-impacting incidents under the organization's reporting process. Escalate urgent danger and follow applicable local notification or professional requirements.
BEFORE YOU START
What to have ready
- Date, time, location or system, reporter, event category, and status
- Neutral description, timeline, people or assets affected, and immediate impact
- Immediate containment, care, safety actions, notifications, and decision owners
- Evidence location, witnesses, logs, photos, and chain-of-custody precautions
- Root-cause status, corrective actions, due dates, reviewer, and retention rule
Capture observable facts
Separate what was seen, reported, measured, or logged from interpretation. Use timestamps and identify the source of each important fact. Record the scene or system state appropriately, while avoiding unnecessary personal or sensitive details.
Document response
Explain immediate actions, who authorized them, what was contained, and what remains at risk. Record notifications and escalation without speculating about fault. For safety, security, privacy, or regulated events, follow the designated response team and local requirements.
Learn and close
Treat root cause as a reviewed finding, not a guess made in the first report. Assign corrective and preventive actions with owners and due dates, then record effectiveness checks. Restrict access and retain the report according to approved policy.
Common mistakes to avoid
- Mixing opinion, blame, and unverified cause into the initial factual record
- Failing to preserve evidence, exact timing, notifications, or containment decisions
- Closing the report without an owner, corrective action, or effectiveness check
A FEW THINGS WORTH KNOWING
Incident Report questions, answered
What should be written immediately after an incident?
Record when and where it occurred, observable facts, impact, immediate safety or containment actions, and who was notified. Add analysis later through the approved review process.
Should names appear in an incident report?
Include only information needed to identify roles, witnesses, affected assets, or follow-up owners, using the approved access level. Apply privacy and retention guidance for sensitive cases.
When does an incident become a reportable event?
Use the organization's thresholds and applicable local or sector rules; do not infer from severity alone. Escalate uncertainty to the designated safety, security, privacy, or legal contact promptly.
A draft is the beginning—not the final review.
Check names, figures, dates, and every obligation before you use or sign your document. For legal, employment, property, or financial matters, consult a qualified local professional when needed. This is an AI drafting tool, not an official government form or a guarantee of legal validity.