Write clear, factual incident reports that document what happened, impact, response, root causes, and follow-up actions. Use after operational, security, safety, or customer-impacting incidents when a formal written record is required.