In-Class

WEEK 5 : Slides >>>

Investigation report Writing

I. Purpose and Preparation:

  • Purpose: The report is the final output of the investigation or security activity. The content of a report may lead to the next phase of related activity, but it marks the last milestone of an investigation and the beginning of a new chapter in the assignment/engagement.

II. Report Structure:

  • Mandatory Sections:
    • Title Page (clear identification)
    • Table of Contents (hyperlinked)
    • Introduction (context, background)
    • Executive Summary (non-technical overview for senior management)
    • Scope and Objectives (matching the original agreement)
  • Key Investigative Sections:
    • Findings and Analysis (classified by risk level, with evidence)
    • Investigation Report (details, evidence chain of custody, personnel involved)
    • Criminal/Forensic Investigation (crime details, legal framework, evidence handling)
    • Approach and Methodology (visual representation of the process, tools used, reasoning)
  • Other Important Sections:
    • Conclusions and Opinion from the Analysis (supported by evidence)
    • Project Governance (team structure, roles, timelines)
    • About Us (brief company profile)
    • Annexures (supplementary materials)

III. Content and Style:

  • Audience: Tailor the report’s technicality to the intended audience. The conclusion should always be presented in non-technical terms.
  • Core Elements: Facts, evidence, modus operandi, analysis, conclusion, recommendations.
  • Conclusion and Analysis: Definitively state whether the investigation supports or refutes initial allegations, based on factual results and supporting evidence.
  • Recommendations: Provide feasible recommendations to prevent future similar incidents (policy changes, training, enhanced security).
  • Characteristics of a Good Report:
    • Objectivity: Facts, not opinions; supported by evidence; unbiased.
    • Clarity: Easy to understand, reproducible.
    • Thoroughness: Address all aspects; explain all evidence; clearly state limitations.
    • Conciseness: To the point; avoid jargon and vague terms.
    • Professionalism: Consistent terminology, active voice, proper grammar and spelling.
    • Security: Password-protect the document; share password securely.

IV. Writing and Design:

  • Planning Coverage: Consider audience, time constraints, draft/final status, and delivery method.
  • Document Design: Consistent fonts and formatting; clear dates; appropriately sized graphics; consistent margins and lists; informative headings; effective use of bullets, lists, and tables. Ensure digital reports are printable without formatting loss.
  • Writing Practices: Spell and grammar check; active voice; avoid vague words; consistent terminology; use templates. Thoroughly review before distribution.
  • Document Properties and Metadata: Remove unnecessary metadata to protect privacy and avoid legal issues. The report should represent the institution, not individual investigators.

V. Legal Considerations:

  • Legal Acceptance: For legal acceptance, clearly present findings, timelines, methodologies, evidence handling procedures, and investigator credentials. Cite relevant laws. Legal expert consultation may be necessary.

This reorganized structure provides a clearer and more concise overview of the information presented in the original notes.


LAB 06

  1. Using the instructions given in the slides create report template that includes all sections as mentioned in the slides
  2. Make sure to follow the formatting guidelines given
  3. Make sure your template is presentable.
  4. for each section and subsection write a brief sentence to describe what should be added to this section or subsection.