Free Incident Report Templates

Incident Report Templates are used to document events as they happen, record facts without assumptions, and create a reliable reference for follow-up actions. A well-prepared report can affect workplace decisions, compliance reviews, insurance claims, and internal investigations. To cover different use cases, we have gathered the most useful incident report templates in Word and Google Docs, each designed for a specific type of incident and reporting environment.

Accident Incident Report Template

An accident incident report is used when a workplace accident, near miss, equipment failure, injury, illness, or property damage needs to be documented in detail. This template is suited for employers that need more injury detail than a short general incident report would contain. It records the employee involved, the location and time of the incident, the task being performed, equipment or materials involved, witness information, and the action taken right after the event. That makes it suited for work environments where the report may later be used in safety review, workers’ compensation matters, or internal investigation.

The injury detail section records the physical effect of the accident in more depth than a general incident form. It identifies the body areas affected, the type of injury, any first aid given, any medical treatment received, and the treatment facility if outside care was needed. The final sections record preventive measures, supervisor notification, OSHA review status, and supervisor comments. This template is used when an employer needs a fuller record of the accident, the injury involved, and the follow-up steps considered after the incident.

Workplace Violence Incident Report Template

A workplace violence incident report is written after a threat, intimidation, physical assault, verbal abuse, property damage, harassment, or another violent or prohibited act at work. This template is suited for employers that need a direct written record of who was involved, what conduct occurred, where it happened, whether there were injuries, and how management responded after the event. It can be used in offices, healthcare facilities, schools, warehouses, retail locations, and other settings where a serious behavioral incident must be documented promptly.

The report separates the person alleged to have engaged in the behavior from the victim and any witnesses, which is important in cases that may move into HR review, security review, or discipline. It also records emergency assistance, medical treatment, immediate action taken, supervisory response, and corrective or disciplinary action. This makes it suited for incidents that require both a factual record of what occurred and an internal record of what the organization did after the incident was reported.

HR Incident Report Template

An HR incident report is used for workplace issues that need a formal internal record, such as policy violations, misconduct, harassment, discrimination, injury, safety violations, or property damage. This template is suited for HR teams, managers, and supervisors who need one report covering the incident itself, the people involved, witness information, the employee statement, immediate action, and the final action taken afterward. It can be used when the matter is serious enough to document formally but does not call for a specialized medical, fire, or technical incident form.

The later sections are written for internal review and decision-making. They record recommended or final action such as a verbal or written warning, training, counseling, no further action, or another outcome decided by HR or management. Because the template includes both the incident description and the acknowledgment area, it can be used as part of an employee relations record or a workplace case review. It also works in cases where a short email or informal note would not be enough for the seriousness of the issue.

Fire Department Incident Report Template

A fire department incident report is used after a fire, rescue operation, hazardous materials event, medical emergency, or related response that must be documented as part of departmental records. This template is suited for recording dispatch and scene times, incident type, property type, responding units, assisting agencies, and the general cause if it is known at the time of reporting. It gives the reporting officer a place to document both operational details and the overall event record after the response is complete.

The later sections record the response in more detail. They cover primary actions such as fire suppression, medical aid, search and rescue, hazard control, and utility shutdown. The report also records civilian and firefighter injuries or fatalities, estimated property and contents damage, the area of origin, and a written description of the incident. This kind of template is suited for departmental reporting, internal review, insurance-related follow-up, and any later review of timing, damage, or response activity.

Workplace Harassment Incident Report Template

A workplace harassment incident report is written when an employee, supervisor, or HR representative needs to document verbal, physical, written, electronic, sexual, retaliatory, or discriminatory conduct at work. This template is suited for complaints that require more than an informal note and may later be reviewed by HR, management, legal counsel, or an internal investigator. It records the reporting party, the complainant, the accused individual, the dates and locations of the incident, and the category of harassment being reported.

The factual description section should be used to record what was said, sent, done, or witnessed without adding personal conclusions. The template also records witness information, attached evidence, prior reporting, requested action, and the effect the incident has had on work performance, well-being, or the workplace environment. That makes it suited for situations where the complaint may involve repeated conduct, earlier reports, or a need for formal intervention by HR or management.

Medical Incident Report Template

A medical incident report is used when an injury, fall, allergic reaction, or another medical event occurs and staff need to document what happened and what treatment was given. This template is suited for clinics, schools, camps, workplaces, residential facilities, and similar environments where a patient or injured person may need immediate care followed by an internal record. It connects the person involved to the date, time, location, type of incident, and the medical condition observed after the event.

The treatment section is central to how this template would be used. It records first aid, CPR, emergency services contact, physician notification, or a case where no treatment was required, followed by written details of what was done. The report also includes injury or condition details, witness information, and final disposition such as return to activity, referral to a clinic, hospital transport, or admission for further care. This makes it suited for incidents where staff need a direct record of the medical response and the outcome after the event.

Employee Incident Report Template

An employee incident report is written after a workplace event involving injury, illness, a near miss, equipment, a vehicle, chemical exposure, property damage, violence, or another work-related issue. This template is suited for employers that need a report covering the employee involved, the nature of the incident, witnesses, injury details, immediate action, and the management review that follows. It can be used in offices, warehouses, job sites, schools, healthcare facilities, and other work environments where the report may later be reviewed by supervisors, HR, safety staff, insurers, or workers’ compensation personnel.

This template goes beyond a short incident narrative. It records medical attention, hospital transport, return-to-work status, property damage, corrective action taken after the event, root cause analysis, PPE use, training status, OSHA recordability, and workers’ compensation claim filing. That makes it suitable when the employer needs one report that documents both the event itself and the internal review that follows. It also works well for cases where management needs to identify what contributed to the incident and what should change afterward.

Offense Incident Report Template

An offense incident report is used when a workplace, institution, security team, or internal authority needs to record conduct that may involve an offense, violation, suspect, victim, witness, vehicle, or collected evidence. This template is suited for incidents that require a formal written record with reporting officer details and follow-up action. It begins with the offense classification, dates, times, location, and officer information, then separates suspects, victims, witnesses, and vehicle details into their own areas.

This format works well when the report may later be reviewed by a supervisor, insurer, investigator, or legal team. The evidence section records photographs, video footage, physical evidence, documents, or other materials tied to the case. The last part of the template records immediate action taken and the next step required, such as further investigation, supervisor review, legal action, insurance notification, or closure. That keeps the report focused on the incident itself and the status of the matter after reporting.

Security Incident Report Template

A security incident report is used after an event such as theft, trespassing, vandalism, assault, suspicious activity, property damage, or a safety breach at a workplace or facility. This template is suited for offices, warehouses, schools, residential properties, retail sites, and other locations where a guard, supervisor, facilities officer, or manager needs a written record of what happened. It starts with the report details and the incident facts, then moves into the people involved, the evidence reviewed, and the action taken at the scene. That makes it suitable for incidents that may later be reviewed by management, law enforcement, insurers, or internal investigators.

The description area in this template should be used to record observable facts, not assumptions. If a door was forced open, a person entered a restricted area, or a damaged asset was found, those facts should be written as plainly as possible. The evidence section is also important here because it ties the report to CCTV review, access logs, photographs, statements, or collected items. The final part of the template records damage or loss and confirms who completed and reviewed the report, which is important when the incident moves into follow-up action or a formal case record.

Information Security Incident Report Template

An information security incident report is used when a company needs a formal technical record of malware, ransomware, phishing, unauthorized access, data leakage, denial of service, or a policy violation involving systems or information. This template is suited for internal security teams, IT departments, compliance staff, and incident managers who need more technical detail than a general workplace report would contain. It begins with incident classification and severity, then records who reported it, which system or area was affected, and which response lead is handling it.

The technical section is where this template becomes especially relevant for investigation work. It records systems or users affected, device names, IP addresses, operating systems, services impacted, and the type of data involved. The later sections cover impact assessment, containment, remediation, notification, root cause, preventive measures, incident status, and closure approval. This kind of format is suited for organizations that need a report that can stay with the incident through investigation and final closure instead of ending after the first response.

Cybersecurity Incident Report Template

A cybersecurity incident report is used after malware, phishing, ransomware, unauthorized access, denial of service, or another digital threat is discovered in an organization. This template is written for IT teams, internal security staff, managed service providers, and company personnel responsible for incident response. It records how the issue was detected, how serious it was, when it was discovered, and what kind of incident it appears to be. That gives the team a written record that can be used during containment, escalation, and later review.

The middle part of the template focuses on affected systems, accounts, and compromised data. That is where the person completing the report would note which systems were impacted, whether personal, financial, credential, or confidential information was involved, and how the incident affected business operations. The actions section records containment steps such as isolating systems or resetting passwords, followed by notification, root cause, corrective action, and resolution date. This makes the template suitable for incidents that need both a technical summary and a business record of what was done after discovery.

Nursing Incident Report Template

A nursing incident report is written when an event in a care setting affects a patient, staff member, visitor, or the safe operation of the unit. This template is suited for recording falls, medication errors, breathing or cardiac distress, behavioral events, injury, or equipment malfunction in hospitals, nursing units, care homes, and similar settings. It begins with the patient or individual involved, then records where the incident happened, what type of event it was, and what clinical staff did in response. That makes it appropriate for situations where the sequence of care and the patient’s condition after the event must be documented carefully.

The section on immediate action is one of the main working parts of this template. It records assessment, vital signs, first aid, physician notification, medication administration, supervisor notification, and emergency response. The outcome section then documents injury details and current condition so the report does not stop at the event itself. There is also room for physician notification, guardian or family contact, outside agency involvement, and witness information. This is the kind of format nursing staff can use when the report may later be reviewed by clinical leadership, risk management, or facility administration.

Student Incident Report Template

A student incident report is used in schools to document conflicts, behavior issues, rule violations, academic misconduct, bullying, safety problems, or property damage involving students and staff. This template is suited for teachers, administrators, counselors, and other school personnel who need to create a written record after an event on school grounds or during school activities. It records the student involved, school and reporting information, the date and location of the incident, and the individuals connected to the event.

The report also records what the school did right after the incident, such as providing first aid, notifying a parent or guardian, referring the student for counseling, separating students, or sending the matter to administration. Injury and property damage are recorded separately, followed by follow-up or disciplinary action and administrator review. This makes the template suited for school records, guardian communication, and internal review after a conduct or safety incident.

What Is an Incident Report?

An incident report is a written record of an event that disrupted normal operations, created a safety concern, caused damage, involved misconduct, or led to injury, loss, or investigation. It is used to document what happened, where it happened, who was involved, what was observed, and what was done after the event. The purpose is not to tell a dramatic story. The purpose is to create a factual record that can be reviewed later by management, HR, safety staff, school administrators, medical personnel, security teams, insurers, or legal counsel, depending on the situation.

In day-to-day use, an incident report may be written after a workplace accident, harassment complaint, school altercation, fire response, medical event, theft, cybersecurity breach, or policy violation. The exact format changes with the setting, but the goal stays the same. The report should preserve important facts while they are still fresh and place them in an organized written record. That record may later guide disciplinary action, medical follow-up, insurance review, regulatory review, or internal prevention efforts.

An incident report is also different from a casual note or verbal explanation. A quick message to a supervisor may alert someone that something happened, but it usually does not record the full context, the people involved, the evidence reviewed, or the action taken afterward. A formal report creates accountability and gives the organization something it can refer back to if questions come up later.

When to Use an Incident Report Template

An incident report template should be used any time an event calls for formal documentation instead of an informal message or verbal update. That usually includes situations involving injury, illness, property damage, threats, misconduct, harassment, theft, security concerns, school behavior issues, fire response, or technology-related disruptions such as unauthorized access or suspected data exposure. Once an event may lead to follow-up action, outside reporting, management review, or a dispute about what happened, a written report becomes important.

Using a template is especially useful when the person completing the report is expected to gather facts in a consistent format. Without a template, reports often leave out basic items such as the exact time, location, witness details, immediate response, or the name of the person completing the record. That can create gaps later when someone tries to review the incident or compare one event with another.

A template is also useful when an organization handles more than one kind of incident. A general workplace report may work for a minor safety issue, but a harassment complaint, student conduct matter, fire response, or information security event usually calls for a more specific format. In those cases, the template acts as a guide for the person writing the report and keeps the record focused on the facts that matter in that setting.

How to Write an Incident Report

Writing an incident report starts with one basic rule. Record facts first and leave opinions out. The person completing the report should describe what was seen, heard, reported, or confirmed at the time, then document the response that followed. A good report does not try to sound dramatic or persuasive. It should read as a careful record prepared for later review.

Start with the basic incident facts

Begin with the date, time, and location of the event. Identify the person completing the report and the individual or individuals involved. If the report is being prepared in a workplace, school, care facility, or security setting, include department, unit, role, or other identifying details that connect the incident to the right person or area.

This part may seem routine, but it is often the first place where mistakes begin. A missing time, an incomplete location, or an unclear name can create confusion later, especially if several people were present or the incident moved across different areas.

Describe what happened in a factual order

After the basic details, explain the event in the order it happened. Keep the writing direct. State what was observed, what was reported, and what took place next. If a witness said something important, record that as a reported statement and identify who gave it. If a person was found injured, record where they were found, what condition was observed, and who responded.

This part should avoid assumptions. For example, it is better to write that an employee was found on the floor near a wet area than to write that the employee was careless. It is better to record that a staff member reported receiving repeated messages than to label the situation before the review is complete. The report should document events, not argue a conclusion.

Identify the people involved

Name the person affected, the reporting party, witnesses, supervisors, responders, or any other individuals connected to the event. In some reports, this may also include the accused individual, suspect, patient, student, visitor, or outside agency contact. The goal is to make it easy for a later reviewer to understand who played which role during the incident.

When names are not known, record the best available identifying information at the time. That may include job title, shift, room number, physical description, or relationship to the event. Leaving a person unnamed without explanation can weaken the report later.

Record injuries, damage, or operational impact

If the incident caused injury, illness, damage, disruption, or loss, document that in plain terms. State the type of injury observed, the body area affected, the item damaged, the system impacted, or the activity interrupted. If no injury or damage was observed at the time, that should be recorded as well. It is better to state that no visible injury was noted than to leave the section blank.

In technical or security incidents, this part may involve impacted systems, data categories, service outages, or affected accounts. In workplace, medical, or school incidents, it may involve physical injury, property damage, emotional impact, or disruption to normal operations.

Document the response right away

An incident report should not stop at the description of the event. It should also record what was done after the incident was discovered. That may include first aid, emergency contact, physician notification, supervisor notification, area shutdown, student separation, police contact, account disablement, system isolation, or evidence collection.

This part is important because two similar incidents can lead to very different follow-up actions. The report should show how staff or responders reacted at the time and what immediate steps were taken to contain the issue or protect those involved.

Note any evidence or supporting material

If photographs were taken, logs were reviewed, emails were saved, statements were collected, or video footage was checked, note that in the report. An incident report does not have to carry every attachment inside it, but it should point to the material reviewed or gathered during the initial response.

That reference can become very important later. A report that mentions CCTV, screenshots, injury photos, written statements, or access logs gives the reviewer a better path for follow-up than a report that only says evidence exists somewhere.

Review the report before submission

Before the report is submitted, read it once for accuracy and completeness. Make sure dates match, names are spelled correctly, and the timeline makes sense. Check that the report does not shift into opinion or vague language. A short review at the end can prevent a weak report from becoming part of a formal review record.

A final check is also useful for tone. An incident report should stay professional, factual, and measured even when the event itself was upsetting, serious, or emotionally charged.

Common Mistakes to Avoid When Writing an Incident Report

Even when the right template is used, reporting mistakes can still weaken the record. The issues below are common in workplace, school, medical, HR, and security reporting, and each one can affect how the incident is reviewed later.

• Using vague wording. Phrases such as “something happened” or “there was an issue” do not explain the event well enough. The report should state what happened in direct terms.
• Mixing facts with personal opinions. An incident report should record what was seen, heard, reported, or confirmed. It should not guess intent or assign blame before a review is completed.
• Leaving out dates or times. A missing timeline can weaken the report. The date of the incident, the time it happened, and the time it was reported should be recorded whenever possible.
• Writing an incomplete location. Saying only “office” or “parking lot” may not be enough. The report should identify the exact area so the event can be reviewed properly later.
• Skipping witness details. If someone saw the incident or gave a statement, that information should be recorded. Leaving witnesses out can create gaps in the record.
• Stopping after the event description. The report should also record what happened next, such as first aid, supervisor notification, police contact, system isolation, or another immediate response.
• Leaving injury or damage sections blank. If no injury or damage was known at the time, that should be stated. Empty sections can make the report look unfinished.
• Using emotional or dramatic wording. Even if the incident was upsetting, the report should stay professional and factual. Strong emotional language can distract from the record itself.
• Submitting the report without reviewing it. Names, dates, and event details should be checked before submission. Small errors can create confusion during follow-up review.
• Waiting too long to write the report. Delays increase the chance of missing details or inaccurate recollection. The report should be completed as soon as reasonably possible after the incident.

Incident Report Template vs Incident Log

An incident report template and an incident log are related, but they are not the same thing. An incident report is written for one specific event and goes into detail. It usually records the date, time, location, people involved, factual description, effect of the incident, immediate response, evidence, and review details. It is meant to stand on its own as a complete record of that event.

An incident log is usually shorter and broader. It is used to track multiple incidents over time in a running list. A log may record the date, a short summary, status, assigned reviewer, and outcome for each event. This makes it useful for departments that want to monitor patterns, volume, or open cases across a period of time.

The easiest way to think about the difference is this. The incident report captures depth. The incident log captures tracking. A school administrator may keep a log of student conduct events during the semester, but each serious event may still require its own full incident report. A security team may keep a daily log of reported concerns, but a theft, assault, or access breach may still call for a separate report with more detail.

In practice, organizations often use both. The report records the event in full. The log records that the event occurred and tracks its status over time.

FAQs