Use this section to include evidence and reference content that is to be shared within the report. If the evidence, etc., uses too many pages in the findings section, it can be placed in the document as an annexure. Annexures may carry document scans $($Licenses$,$ etc.$),$ and these can be placed in this section as appropriately numbered annexures and referenced from within the document. The type of content included in the annexures may be a log file; large tables or figures; extracts from standards, laws, or regulations, etc.

A declaration about the ownership of the contents of the document, liability, and restrictions of use.

This is a mandatory section. A summary of the findings, the impact, and recommendations using simple language that can be understood by the senior management. The objective is to present the facts and findings in a manner that influences the reader to take necessary action. Recommendations may be presented but at a high level. It is advisable to exclude legal opinion on the incident or issues$($s$)$ unless this is a legal report or the client has asked for legal opinion, too.

Reproduce the scope and objective from the contract so there is no ambiguity. Include any comments relating to the scope$/$objective to highlight changes, challenges, etc. List any changes made to the scope $($during the course of the engagement$)$ in a separate section for the same, and provide an explanation for the same. List exclusions, inclusions, and value additions.

This is a mandatory section. High$-$level statements to provide the context of the engagement, the history$/$why it is being done, the expected outcome, etc. Background of the investigation $$ how was the incident discovered, etc.

It will be nice to include a section about yourself or your company. This information can include your capabilities, testimonials, client references, client list, and any relevant marketing collaterals.

Description of the crime, location, time, etc. The manner in which the investigation was carried out. The persons who have participated in the investigation $($name of officer who has taken the complaint and the chain thereafter$).$ Applicable sections of the law under which action is taken. List of evidence artifacts, their description, and the present location. Statement of compliance with best practices in collection, transport, storage, and retrieval of evidence.

$($Preferably$)$ insert a graphic visualization of the investigative process. Explain all the steps in carrying out the investigation, tools, and techniques used to carry out the activities successfully. Explain all the steps in carrying out the analysis of the findings and why it should be considered credible. Provide any references to industry standards$/$frameworks on which the approach is baselined. If interviews are to be conducted, what is the agenda. Any particular process issues to be considered $($based on regulatory or industry practices$).$

Names of investigation officers and their duration on the case. Details of evidence seized, statement of chain of custody, and present location. Evidence in digital form $($screenshots$,$ files, etc.$)$ should be accompanied by relevant notes and explanations, origin, date, etc. Contact information of all concerned persons. Details of arrests, notices issued or received. Related case histories and law, cross$-$references. Notes on the crime scene response and the integrity of evidence captured.

Project Charter, vision, and mission. What is the structure of the project team, functional teams, leaders, and escalation path? Roles, responsibilities, and qualifications$/$experience of the individual team members. Tasks assigned to the team members. Internal and interim project status reporting and review schedule. A high$-$level representation of the project plan and fulfillment of the same.

This should distinctly show the title of the project, report version number, your company as the creator, and client name.

For each finding, provide the analysis of the finding and arrive at a conclusion. For each area, provide a remediation$/$mitigation$/$action required strategy. Timeline of the analysis. Cross$-$References. Evidence examined for each finding and the result.

This is a mandatory section, and it must be generated using the ToC feature of the word processor so it is hyperlinked to each section in the document. Please see the guidance for tables later in the document. Tables must be generated from the word processor application itself so that it is hyperlinked to the appropriate section in the document.

Classify the findings $($critical$,$ high, medium, low risk$).$ List the findings with the relevant digital evidence, including the analysis of the issue, impact, remediation, recommendation, etc. $($it might be advisable to use tables or sections to segregate the issues$).$ Using the page break feature, ensure that every issue is highlighted on a new page.

Document information $($title$,$ date, release v