Incidents

Investigate an incident

Investigation steps are a chronological record of evidence gathered after an incident is reported. The investigation timeline appears on the incident detail page, ordered newest first. Each step captures a specific type of evidence and who recorded it.

How to record a step

  1. Open the incident detail page.

  2. In the investigation section, select Record Step.

  3. Choose the step type from the list.

  4. Enter the required information and save.

The step is added to the investigation timeline with a timestamp and the person who recorded it. You can delete a step from the timeline. Deleted steps cannot be recovered.

Step types

Each step type captures a different kind of evidence. The available types are listed below.

Record Information

Use this to document facts, observations, or context during the investigation. The form asks for When did this occur? and Details. After saving, it appears in the timeline as Information Recorded.

Action Performed

Use this to record an action taken during the investigation. The form asks for When did this occur? and Details, with a placeholder text Describe the action taken…. After saving, it appears as a generic step with details.

Take Photos

Upload images as visual evidence. After saving, the step appears in the timeline as Photos Taken under Photos with optional Notes.

Attach Files

Upload documents, spreadsheets, or other files as evidence. After saving, the step appears in the timeline as Attached Files with optional Notes.

Request Form

Request a form submission from someone as part of the investigation, such as a witness statement. After saving, the step appears in the timeline as Form Requested and shows the form name, status badge, and requester or target details. You can copy the link or view the submission.

Change Severity

Sometimes you need to change the status as part of a process of escalation, in these cases rather than updating the field on the incident you can do a fully logged severity change as part of your investigation. After saving, the step appears in the timeline as Severity Changed and shows the previous severity, the new severity, and an optional Explanation.

Create Task

Create a task directly from the investigation timeline. After saving, the step appears in the timeline as Task Created and may include task details with optional Notes.

Link one or more hazardous materials from the site register to the investigation. Notes are required. After saving, the step appears in the timeline as Hazardous Materials Linked with a list of the linked materials and notes. Each material has a direct link back to the site register record.

See Link hazardous materials to an incident investigation for the full workflow.

Medical Update

Record medical details related to the incident. After saving, the step appears in the timeline as a medical update with Presenting Issues, Body Location, Person Type, Outcome, Treatment Given, and Notes.

Document Review

Use this to record a review of a document related to the incident. The form asks you to select the document, enter review comments, and set a performed-at timestamp. After saving, the step appears in the timeline as Document Reviewed with a navigable link to the document. When you have permission, CalmCompliance also creates a linked review record in the document so the follow-up is tracked in both places.

Risk Assessment Review

Use this to record a review of a risk assessment related to the incident. The form asks you to select the risk assessment, enter review comments, and set a performed-at timestamp. After saving, the step appears in the timeline as Risk Assessment Reviewed with a navigable link to the risk assessment. When you have permission, CalmCompliance also creates a linked review record in the risk assessment so the follow-up is tracked in both places.

Who can see investigation steps

Only users with the Incident module manage or admin role can see the investigation timeline. Users with the member role cannot see investigation steps.

Who can record steps

Only users with the Incident module manage or admin role can record investigation steps. Admins with the admin role can also edit and delete steps.

Was this helpful?