This lesson provides guidance on how to document incidents thoroughly and preserve evidence to support investigations.
Documenting Incidents for Investigation
This lesson provides guidance on how to document incidents thoroughly and preserve evidence to support investigations.

What to document

Date, time, location, and participants; exact language used; any witnesses; relevant screenshots or messages; and the context of the incident. Include your own observations and the impact on work performance or safety.

Preserving evidence

Keep original communications intact and avoid editing messages. Save copies securely, use proper channels, and limit sharing to those involved in the investigation. Do not discuss the incident with unrelated coworkers.

Organizing a clear record

Prepare a concise incident summary with a timeline, sequence of events, and the actions taken. A well documented report supports a prompt and fair investigation and helps protect all parties.