Post-Incident Analysis, Investigation, and Documentation
Domain 8 covers post-incident analysis, investigation, and documentation. The exam tests how the ISO preserves facts, supports learning, and avoids turning a safety report into unsupported blame.
Core rules
- Conduct or contribute to an after-action review focused on what happened, why, and what should change. Separate immediate documentation from formal investigation.
- Preserve evidence: scene conditions, photos, PPE, equipment, dispatch and radio logs, timelines, witness statements, and medical/exposure information. Maintain chain of custody when required.
- Report injuries, near misses, exposures, and structural failures through department policy. Protect confidential medical information and follow public-records rules.
- Findings should distinguish proximate cause from contributing factors and recommend corrective actions with owners and deadlines.
Worked example
A firefighter suffers a burn after a flashover. The ISO documents crew assignments, time of entry, radio traffic, PPE observed, and the burn injury report. The review finds a delay in opening a ventilation outlet and recommends training and a revised tactical benchmark, without declaring individual fault before investigation.
Traps
Writing the report from memory days later; losing radio logs; mixing opinion with fact; blaming a person before root causes; failing to track exposure and PPE contamination.