ASO Report Writing and Documentation 1 — Questions and Answers
Question 1: Which characteristic is MOST important when writing a security incident report?
- Using technical jargon to appear professional
- Accuracy and factual objectivity (Correct answer)
- Length and detailed personal opinions
- Speed of submission over accuracy
Correct answer: Accuracy and factual objectivity
Accuracy and factual objectivity ensure the report is credible and legally defensible.
Question 2: When should an incident report be completed after an event occurs?
- Within 48 hours
- At the end of the week
- As soon as possible while details are fresh (Correct answer)
- Only after a supervisor reviews the scene
Correct answer: As soon as possible while details are fresh
Reports should be completed as soon as possible to capture accurate details before memory fades.
Question 3: What does the acronym 'WWHWWW' stand for in report writing?
- Who, What, How, Where, When, Why (Correct answer)
- When, Where, How, Who, What, Witnessed
- Who, When, How, What, Where, Warned
- What, Where, How, Who, Why, Witnessed
Correct answer: Who, What, How, Where, When, Why
WWHWWW (Who, What, How, Where, When, Why) covers the essential elements every security report must address.
Question 4: A security officer should write reports in which type of language?
- First-person, using 'I' statements (Correct answer)
- Third-person passive to avoid bias
- Second-person to address the subject directly
- Informal language to be easily understood
Correct answer: First-person, using 'I' statements
First-person language ('I observed,' 'I responded') clearly identifies the officer's direct actions and observations.
Question 5: Which of the following should NEVER be included in an official security incident report?
- The officer's name and badge number
- Speculation and personal opinions about guilt (Correct answer)
- Witness statements with names
- Date, time, and location of the incident
Correct answer: Speculation and personal opinions about guilt
Reports must contain only documented facts; speculation and personal opinions undermine credibility and legal standing.
Question 6: What is a 'chain of custody' as it relates to security documentation?
- A log tracking who had possession of evidence at all times (Correct answer)
- A list of supervisor contacts during an incident
- A record of all security personnel on duty
- A document authorizing use of force
Correct answer: A log tracking who had possession of evidence at all times
Chain of custody documents every person who handled evidence, ensuring it is admissible and untampered in legal proceedings.
Question 7: If a security officer makes an error while writing a handwritten report, the correct action is to:
- Use white-out to cover the mistake
- Shred the report and start over
- Draw a single line through the error, initial it, and write the correction (Correct answer)
- Leave the error and add a note at the bottom
Correct answer: Draw a single line through the error, initial it, and write the correction
Drawing a single line through an error and initialing it maintains the document's integrity without concealing information.
Which characteristic is MOST important when writing a security incident report?