Which practice supports effective investigations during incident response?

• A. Documenting the sequence of events and actions taken in chronological order.
• B. Retrieving unrelated personal information about witnesses.
• C. Delaying documentation until after shifts end.
• D. Filing only numeric codes with no narrative.

Answer: (A)