The following is an example of a poorly written security incident report.

“On Monday morning, I saw a car drive up to the gate.  I stepped out to say a few words to them, the driver then got upset.  I calmed him down and he left.”

Let’s break this down and see what is missing.  What time Monday morning did this happen?  Specific timing is critical, especially if your supervisor or client wants to investigate further.  What gate did the driver drive up to?  Smith Street Gate?  Main Street Gate?  The specific “where” is important.

What words were exchanged?  What did the guard say, and what was the conversation about?  Why was the driver angry?  How did he calm down?

What did the driver physically look like?  What kind of car was being driven?  Was there a license plate?

Move on to the next lesson for an example of a well-written incident report.