An incident report form is the blank template a guard fills in when something goes wrong on site: an injury, a theft, a trespass, a near miss, property damage. Before a word is written, the form itself decides how good the record can be. A template that prompts for the right fields, in the right order, produces a report an insurer or a court will accept. A blank box that just says “describe the incident” produces three vague lines and no evidence.
This guide is about the form as a document: the eight fields your template must contain before you hand it to a guard, the mistakes that make a filled-in form worthless, and when a printable paper form is enough versus when you need a digital one. If what you need is how to write up the report once you have the form, that belongs in our security incident report format guide; this piece stays on the form itself.
Why the incident report form matters
The report is written in minutes but read for months. It is the document a claims adjuster uses to decide a payout, the record a lawyer reads before a liability case, and the evidence a client reviews when they ask what their security provider actually did. If a detail was not captured at the scene, it usually cannot be recovered later.
A structured form matters because it removes the guesswork under pressure. A guard dealing with an injured person should not have to remember what a complete report needs; the form should ask. That is what separates a system that produces usable evidence from one that produces a pile of inconsistent notes.
The 8 fields every incident report form must include
- Date and time of the incident – the actual time it happened, not the time the report was written.
- Location – the specific place on site, precise enough that someone who was not there can picture it.
- Reporter details – the name and role of the guard completing the form, so the account is attributable.
- People involved – names and roles of everyone present: victims, witnesses, staff, third parties.
- Description of what happened – a factual, chronological account, without opinion or blame.
- Action taken – what the guard did: first aid given, police called, area secured, supervisor notified.
- Evidence – photos, video or audio from the scene. AVES incident forms capture six-sided photo evidence (front, back, left, right, top, bottom) plus video and audio.
- Findings and follow-up – the outcome, any corrective action, and whether a police report or investigation was raised.
Together these eight answer the questions every reader asks: what, when, where, who, what was done, and can you prove it.
How a digital incident report form works
A paper form relies on the guard remembering to fill every box and on the handwriting being legible weeks later. A digital incident report form removes both risks. The fields are mandatory where they need to be, so a report cannot be submitted half-finished. Photos, video and audio attach directly to the record rather than living on someone’s phone. The timestamp and the reporter are captured automatically.
Because the report is data rather than paper, it is searchable and it routes to the right person for review the moment it is submitted. For the full workflow around logging, escalating and analysing incidents, see the AVES incident reporting software. If you need the specific layout conventions, the security incident report format guide covers structure.
Common incident report form mistakes
Opinion instead of fact. “The visitor was aggressive” is a judgement. “The visitor raised his voice and struck the counter” is an observation. Reports record observations.
Missing the time of the incident. Recording only when the report was written loses the single most important timestamp.
No evidence. A description with no photo is an assertion. A single photo of a wide area proves little. Capture the scene from multiple angles.
Blame and speculation. A report that guesses at cause or assigns fault undermines its own credibility. Record what was seen; leave conclusions to the investigation.
Gaps left blank. An empty field is a question left unanswered, and it is often the answer the reader needs most.
Written hours later. Memory fades fast. A report completed at the scene is far more reliable than one reconstructed at the end of a shift.
Incident report form checklist
- Date and time of the incident recorded, separate from the report time.
- Specific location captured.
- Reporter named, with role.
- All people involved listed with roles.
- Factual, chronological description with no opinion.
- Action taken recorded.
- Evidence attached: photos from multiple angles, plus video or audio where relevant.
- Findings and follow-up noted, including any police report.
Frequently asked questions
What is an incident report form?
An incident report form is a structured document that records the details of an incident on site: what happened, when and where, who was involved, the action taken and the evidence captured. It is used for insurance, liability and investigation.
What should an incident report form include?
At a minimum: date and time of the incident, location, reporter, people involved, a factual description, action taken, evidence, and findings or follow-up.
What is the difference between an incident report form and a witness statement?
The incident report is the guard’s structured account of the event. A witness statement is a separate first-person account from someone who saw it. Both support the same case. See the AVES witness statement form.
Should incident reports be written on paper or digitally?
Digital is more reliable. Paper forms are prone to blank fields, illegible handwriting and lost evidence. A digital form enforces the required fields, attaches photo, video and audio directly to the record and timestamps it automatically.
How soon should an incident report be completed?
As close to the incident as possible, ideally at the scene. Memory and evidence both degrade quickly, so a report written hours later is weaker.
Give your guards a form that captures real evidence
If your incident reports still come in as a few handwritten lines, the evidence you need after an incident is not there. AVES incident forms prompt for every required field and capture six-sided photo evidence plus video and audio, so every report is complete and defensible.
Book a 30-minute demo and we will show you the actual incident form and evidence-capture screens: Book a demo.
Prefer to explore first? Start a free account.
Follow AVES on Instagram.