CSI Incident Report Writing 2 — Questions and Answers
Question 1: When documenting witness statements in an incident report, the investigator should:
- Paraphrase all statements to improve clarity
- Record statements verbatim and attribute them to the source (Correct answer)
- Combine multiple witness accounts into a single narrative
- Omit statements that contradict the physical evidence
Correct answer: Record statements verbatim and attribute them to the source
Verbatim recording with proper attribution preserves the integrity of witness testimony and supports evidentiary value.
Question 2: Which section of a formal incident report typically contains the investigator's conclusions and recommendations?
- Synopsis
- Body/Narrative
- Summary and Recommendations (Correct answer)
- Chain of Custody Log
Correct answer: Summary and Recommendations
The Summary and Recommendations section is where investigators present their analytical conclusions and proposed next steps.
Question 3: A security investigator uses the phrase 'the suspect appeared nervous' in a report. This is an example of:
- A factual observation
- An inference or opinion (Correct answer)
- A legal conclusion
- An evidentiary finding
Correct answer: An inference or opinion
'Appeared nervous' is an inference drawn from observable behaviors, not a directly measurable fact.
Question 4: The term 'corroborating evidence' in a report refers to:
- Evidence that contradicts eyewitness testimony
- Evidence that challenges the primary suspect
- Evidence that supports or confirms other evidence already gathered (Correct answer)
- Physical evidence collected at the scene before interviews
Correct answer: Evidence that supports or confirms other evidence already gathered
Corroborating evidence strengthens a finding by independently confirming what other evidence or testimony indicates.
Question 5: In incident report writing, the 'chain of custody' documents:
- The sequence of events leading to the incident
- Who had possession of evidence and when, from collection to court (Correct answer)
- The hierarchy of command notified during the incident
- The chronological order of witness interviews
Correct answer: Who had possession of evidence and when, from collection to court
Chain of custody tracks every person who handled evidence, ensuring its integrity and admissibility.
Question 6: Which writing style is most appropriate for incident reports?
- First person, active voice, formal language (Correct answer)
- Third person, passive voice, technical jargon
- Second person, informal language, conversational tone
- Mixed person, figurative language, descriptive prose
Correct answer: First person, active voice, formal language
First person, active voice, and formal language produce clear, accountable, and professional reports.
Question 7: When a security investigator must correct an error in a written report, the proper procedure is to:
- Use correction fluid to cover the error and rewrite
- Delete the original report and reissue a clean version
- Draw a single line through the error, initial it, and make the correction (Correct answer)
- Rewrite the entire page to maintain a clean appearance
Correct answer: Draw a single line through the error, initial it, and make the correction
Drawing a single line, initialing, and correcting preserves the original entry while showing the authorized change.
CSI Incident Report Writing 2
When documenting witness statements in an incident report, the investigator should: