CSI Incident Report Writing 3 — Questions and Answers
Question 1: A report that contains hearsay without proper attribution can:
- Strengthen the investigator's credibility in court
- Result in the report being inadmissible or challenged (Correct answer)
- Replace the need for direct witness testimony
- Accelerate prosecution timelines
Correct answer: Result in the report being inadmissible or challenged
Unattributed hearsay undermines report credibility and may render findings legally challengeable.
Question 2: Which element should be included in the header of every incident report page?
- Full transcripts of all interviews
- Case number, date, and investigator name (Correct answer)
- Suspect's complete criminal history
- Analysis of physical evidence
Correct answer: Case number, date, and investigator name
Headers with case number, date, and investigator name ensure each page can be identified and attributed if separated.
Question 3: In documenting a theft incident, the investigator notes the approximate value of stolen goods. This estimate should be:
- Based on the investigator's personal market knowledge
- Attributed to the victim or another identified source (Correct answer)
- Left out unless the exact value is confirmed
- Rounded to the nearest hundred dollars for simplicity
Correct answer: Attributed to the victim or another identified source
Value estimates must be sourced and attributed to avoid appearing as speculation by the investigator.
Question 4: When writing a supplement report, its primary purpose is to:
- Replace the original report when new facts emerge
- Add new information discovered after the original report was filed (Correct answer)
- Correct grammatical errors in the original report
- Summarize the case for supervisory review
Correct answer: Add new information discovered after the original report was filed
Supplement reports capture new investigative findings while the original report remains unchanged.
Question 5: The term 'MO' (modus operandi) in an incident report refers to:
- The physical location where the incident occurred
- The method or pattern of behavior used by the offender (Correct answer)
- The motivation behind the criminal act
- The medical outcome of any injured parties
Correct answer: The method or pattern of behavior used by the offender
MO describes the distinctive methods an offender uses, which can link incidents and aid in suspect identification.
Question 6: Which of the following best describes a 'narrative' section in a security incident report?
- A bullet-point list of evidence collected
- A chronological, detailed account of the incident and investigation (Correct answer)
- A table of suspect biographical data
- A financial summary of losses incurred
Correct answer: A chronological, detailed account of the incident and investigation
The narrative provides a flowing, chronological account that tells the story of the incident and investigation steps.
Question 7: Why should investigators avoid using abbreviations in incident reports unless they are defined?
- Abbreviations always indicate unprofessional writing
- Undefined abbreviations may confuse readers unfamiliar with the terminology (Correct answer)
- Abbreviations are prohibited by federal reporting standards
- Spell-check tools do not recognize abbreviations
Correct answer: Undefined abbreviations may confuse readers unfamiliar with the terminology
Undefined abbreviations can be misinterpreted by attorneys, courts, or others reviewing the report outside the investigator's organization.
CSI Incident Report Writing 3
A report that contains hearsay without proper attribution can: