Incident Notes and Reports
What you will learn
- Organize an incident account in time order.
- Distinguish your observations from information supplied by others.
- Check a report for unsupported statements and missing follow-up.
Turn observations and actions into a clear incident record. Practice chronology, source attribution and honest uncertainty so another person can understand the event and identify what still needs attention.
These lessons build general security skills. Follow the Netherlands guide for eligibility, required training, assessment and permission to work. View local requirements.
The gate report
Ashford Depot, gate G4
At this fictional depot, you see G4 open and report it to control. You are drafting the incident record.
Check your briefing
Post ordersUse the approved report system. Attribute witness information, label estimates and make later changes through the correction process.
Your notes15:15: G4 observed open. 15:16: control notified. You saw nobody open it.
Reception accountAt 15:17, receptionist Jo says the gate alarm sounded twice at about 15:10.
Your draft must establish what you personally observed.
Put it into practice
Check the source of each statement
At 3:15 p.m., you see gate G4 standing open. At 3:17 p.m., the receptionist tells you they heard its alarm twice at about 3:10 p.m. You have no evidence about who opened the gate. Sort these draft report statements.
At 3:15 p.m., I saw gate G4 standing open.
Lesson notes & sources
Capture the foundations
Use the employer's approved notebook or reporting system. When safe, record the date, time, exact place and why your attention was drawn to the event. Add what you observed, who was involved where known, and what you did. Prompt notes give you something concrete to check when completing the fuller report.
Keep timing transparent. Distinguish when an event occurred, when you learned about it and when you made the entry. If a camera clock or witness estimate differs from your own time, identify that source. A later clarification belongs in the approved correction process so the record remains understandable.
Build a readable account
Write the sequence in short paragraphs: what you encountered, the actions taken, the notifications made and the outcome you know. Explain unfamiliar location names or abbreviations. Use plain language and your employer's security report format for the assignment.
Attribute information accurately. 'At 3:12 p.m., the receptionist told me the alarm had sounded twice' identifies a reported fact. Describe what you personally heard or saw separately. Use quotation marks only for words you can accurately reproduce, and label estimates or information that remains unconfirmed.
Review and preserve the record
Before submission, check names, door numbers, times and the order of actions. Compare the narrative with the form's other fields. Remove unsupported motive, emotional labels and repeated detail. Ask whether the reader can tell who was notified, what response was received and which action remains outstanding.
Handle notes, images and reports through approved systems and retention instructions. If relevant footage may exist, record the camera location and incident time and notify the authorised person promptly. Follow the site's preservation process. For practice, revise a fictional report with three missing times and one unsupported accusation.