Diba BES · 7 October 2026

Incident investigation evidence timeline

The timeline is an evidence-organising aid. It does not determine cause, blame or legal reporting requirements.

Your working record

Time/sequenceFact or accountSource/referenceVerified statusOpen questionFollow-up owner

Illustrative example — not client evidence

Time/sequenceFact or accountSource/referenceVerified statusOpen questionFollow-up owner
10:04 (illustrative)Alarm recordedExample system logLog entry identifiedWhat does this timestamp represent?Assign investigator
Later account (illustrative)Door described as openExample interview referenceAccount not independently confirmedWhen was the condition observed?Assign investigator

Using this record

  1. Preserve source and timestamp context.
  2. Label accounts and assumptions.
  3. Record questions without inventing answers.
  4. Assign evidence follow-up through the authorised process.