Skip to content
Osford Risk Group ORG emblem

Government & Public-Sector Security · Emergency & Crisis

Incident Identification & Reporting

Recognising that something is wrong, and getting that information to the right people quickly and accurately. Covers observation, factual recording, initial notification and the written report that follows.

Beginner 5 hours

Learning objectives

  • Distinguish an incident from a routine irregularity
  • Record observations factually and without assumption
  • Notify the correct authority within the required timeframe
  • Produce a clear, defensible written report

Course modules

  1. 01What counts as a security incident
  2. 02Observation and factual recording
  3. 03Immediate notification and escalation
  4. 04Report structure and language
  5. 05Preserving information and scene integrity
  6. 06Practice reports and review

Assessment and certification

Written report exercise assessed against a marking guide.

Certificate of Completion issued on successful assessment.

Related courses

All Government & Public-Sector Security courses

Security Awareness & Professional Conduct

The foundation programme for personnel working in or around public institutions. It establishes what security awareness means in daily work, the standards of conduct expected of officials, and how routine behaviour either strengthens or weakens an institution's protective posture.

View course

Protection of Government Facilities & Controlled Areas

A protective-security programme covering how facilities and controlled areas are organised into security zones, how layered measures work together, and how personnel maintain those measures during normal operations. Content is principle based and describes protective design and management — not methods of defeating controls.

View course

Access-Control Principles & Credential Management

How access rights are granted, verified, reviewed and withdrawn. The programme concentrates on governance and administration of credentials — issuance, lifecycle, audit and revocation — so that access reflects current authorisation rather than historic convenience.

View course