Write an incident report with a provisional cause, impact, and next actions.
Get an editable security incident report that separates known facts from provisional findings and links back to your incident ticket.
Get a staff incident report draft in a shared document, with witness accounts kept separate and questions ready for the site lead.