This may include a written log available from fire control. It may also include voice recording of critical messages. The early attendance of photographic and/or video personnel can be of great benefit. Obtaining security videos from on-site equipment can often be valuable to future investigations. Some security systems will reuse their tapes and so action to retrieve the tapes should be taken without delay.

If an accident or fault occurs, an investigation should be started. The incident commander should notify relevant personnel. Any relevant fire and rescue service equipment should be preserved for investigation. Should equipment have failed, then relevant guidance should be followed.

The names and location of witnesses should be obtained and recorded for interviews. It may be necessary or appropriate to start interviewing during an incident.
When closing an incident the incident commander should consider how it will be handed over. Before finally closing an incident and removing all fire and rescue service resources, the incident commander should consider the following points:

• The need to inform those affected by an incident, such as the responsible person and neighbours that fire and rescue service operations have concluded
• Inform relevant people of any remaining hazards, which includes potential environmental hazards caused by fire and rescue service operations
• Any security issues (this is particularly important when premises are left unsecured)
• Any fire protection or prevention issue