Incident reporting template: what to include and how to use it

Last updated 2026-07-09

What is an incident reporting template and why does it matter?

An incident reporting template is a pre-built form that walks anyone at your workplace through documenting an unplanned event: an injury, illness, near miss, property damage, or environmental release. It matters because memory fades fast. Studies on eyewitness recall show that details blur within hours of an event, and the chain of contributing factors gets harder to reconstruct the longer you wait ^[1].

There's a legal reason too. OSHA requires you to record work-related injuries and illnesses on its Form 300 log and, for certain severe events, to report directly to OSHA within 24 hours (hospitalization) or 8 hours (fatality) under 29 CFR 1904.39 ^[2]. A solid internal template makes that regulatory paperwork almost automatic because you captured the right details at the scene.

Then there's prevention, which is the real point. The Bureau of Labor Statistics reported 2.6 million nonfatal workplace injuries and illnesses in private industry in 2023, a rate of 2.4 cases per 100 full-time workers ^[3]. Most of those came with warning signs. Near misses almost always precede the serious ones. A template that gets filled out for near misses, not only recordable injuries, hands you a paper trail of hazards before someone gets hurt badly.

Small employers get the most out of this. You probably don't have a safety director reviewing every shift. The template stands in for that expertise. It asks the right questions even when the person filling it out has never run an investigation in their life.

What fields must an incident reporting template include?

No single federal law dictates a specific internal report format. What OSHA does require is that you capture enough to correctly complete Form 300 (the injury and illness log), Form 300A (the annual summary), and Form 301 (the injury and illness incident report) for recordable cases under 29 CFR 1904 ^[4]. So your template should collect every field those forms ask for, at minimum. Here's what that looks like in practice.

Basic event identification

• Date, time, and exact location of the incident
• Name of the injured or ill employee (or a description of the near miss if no one was hurt)
• Employee job title and department
• Length of employment at the company
• Date hired

Incident description

• A narrative of what happened, in the worker's or witness's own words
• What the employee was doing just before the incident
• What object, substance, or condition directly caused the harm (OSHA Form 301 calls this the "source" of injury)
• How the injury or illness occurred (the event or exposure)
• Body part(s) affected

Medical and outcome information

• First aid given on site
• Whether the employee was sent to a physician or hospital
• Whether the injury resulted in days away from work, restricted duty, or job transfer
• Name and address of the treating physician or facility

Witnesses

• Names and contact information of anyone who saw the incident or arrived at the scene right after

Root cause and contributing factors

• Immediate cause (the direct physical event or condition)
• Contributing causes (training gaps, equipment condition, supervision, workload, environmental factors)
• Whether this type of event has happened before

Corrective actions

• Temporary controls put in place immediately
• Recommended permanent corrective actions
• Who owns each action, and by what date
• Signature and date of the supervisor completing the form

That last section is where most templates fall apart. They stop at description and never reach prevention. A template without a corrective action field is just paperwork. A template with one is an actual safety tool.

Template section	Required for OSHA 300/301?	Useful for prevention?
Employee ID and job title	Yes	Moderate
Date, time, location	Yes	Yes
Injury description and body part	Yes	Yes
Medical treatment details	Yes	Moderate
Witness names	No (Form 301 doesn't require it)	Yes
Root cause analysis	No	High
Corrective action with owner and deadline	No	High
Near miss checkbox	No	High

What is the difference between an incident report and OSHA Form 300?

OSHA Form 300 is the regulatory log: a running list of every recordable work-related injury or illness during the calendar year ^[4]. You keep it, you post the summary version (Form 300A) each February through April, and you hand it over to an inspector within four hours if OSHA asks.

Your internal incident report template is the source document that feeds Form 300. Think bank transaction record versus monthly statement. The transaction record captures everything in real time. The statement is a summary for one purpose.

Fill out the internal template for every incident, including near misses and first-aid-only events that never reach Form 300. Most of the learning lives there. If you only document recordable cases, you're seeing the tip of the iceberg and calling it the whole thing.

OSHA's Form 301 is already close to a good internal report, and some small employers just use it as their template for every incident, not only recordable ones. That works fine. The one thing Form 301 skips is root cause analysis, so you'd add that section yourself.

For a broader look at reporting requirements and what triggers a report, see our guide on the incident report.

When should an incident report be completed?

As fast as possible after the event, ideally within 24 hours. This isn't arbitrary. OSHA's deadlines for severe incidents are strict: an in-patient hospitalization must be reported to OSHA within 24 hours, and a work-related fatality within 8 hours, under 29 CFR 1904.39 ^[2]. Get your internal template done before those deadlines so you have the facts to report accurately.

Non-severe incidents deserve the same speed for practical reasons. Witnesses are still around. Physical conditions at the scene haven't changed. The injured employee still remembers what they were doing. One study in the occupational health literature found accuracy of incident accounts drops sharply when reports are completed more than 48 hours after the event, though I'll be honest, the exact figure moves around by study and setting ^[1].

A sane policy for most small businesses: the supervisor completes an initial report by end of shift, and the full investigation section is done within 24 to 48 hours. For serious injuries, treat it like an emergency and start the form the moment the scene is safe.

Near misses get the same urgency even though no regulatory clock is running. The near miss is your early warning. Wait a week to document it and you've probably lost the details that would have told you why it happened.

How do you actually investigate an incident, more than describe it?

Filling out the description fields is the easy part. Real investigation means working backward from the event to the conditions that let it happen. OSHA's guidance on incident investigation describes a process that starts at the immediate cause and traces back through contributing and root causes ^[5].

The workhorse framework is the "5 Whys," born in manufacturing quality control. You ask why this happened, then keep asking why about each answer until you hit a root cause you can actually fix. A worker slips on a wet floor. That's the immediate cause. Why was the floor wet? A valve leaked. Why wasn't the leak repaired? It was reported, but no work order got created. Why not? The maintenance request system is informal and requests get lost. That's your root cause: a broken maintenance tracking process. The fix isn't a new pair of boots.

Your template should have a structured section for this. Even something this plain works:

• Immediate cause (what directly caused the harm):
• Contributing factor 1:
• Contributing factor 2:
• Root cause:

That's enough to push supervisors past "the worker wasn't careful."

The hierarchy of controls is the other half. Corrective actions that lean on behavior change (reminding workers to be careful) are the weakest fixes there are. Engineering controls (fixing the valve) and elimination (replacing the process that creates the leak) last far longer. Your template can steer people toward the durable fixes by asking: Can this hazard be eliminated or engineered out? If not, what administrative controls reduce exposure? Is PPE the last line of defense here? This ties straight to OSHA's general duty clause under Section 5(a)(1) of the OSH Act, which requires employers to provide a workplace free from recognized hazards ^[6].

For how investigation findings connect to your broader safety program, our OSHA training guide covers the link to your training obligations.

Do small businesses with fewer than 10 employees need to fill out incident reports?

Partially exempt, not fully. OSHA's recordkeeping rule under 29 CFR 1904.1 exempts employers with 10 or fewer employees throughout the previous calendar year from the routine requirement to maintain the OSHA 300 log, 300A, and 301 forms ^[4]. Employers in certain low-hazard industries (listed in Appendix A to Subpart B of 29 CFR 1904) also get a partial exemption regardless of size.

Here's what the exemption does not touch: the severe injury reporting requirements under 29 CFR 1904.39 apply to every employer, whatever the size or industry. If one of your workers is hospitalized or killed on the job, you still have to call OSHA.

Skipping OSHA's paperwork doesn't mean skipping internal records either. Insurance carriers often demand them. Workers' comp claims go far smoother with contemporaneous documentation. And if OSHA does inspect, a thorough investigation record showing you spotted and fixed hazards is strong evidence of good faith.

So even with three employees, fill out an incident report every time something goes wrong. It costs 20 minutes. It can save you a lot more than that in workers' comp premiums over the years.

What format should an incident reporting template be in?

Paper, fillable PDF, or a digital form. The right answer depends on your operation, and there's no regulatory requirement for format at all.

Paper forms work fine for small, single-location businesses where supervisors are comfortable with paperwork and reports actually get filed. The failure mode is illegible handwriting and forms that vanish.

Fillable PDFs are a step up. They force consistent field completion, email in seconds, and build a digital archive. They cost nothing if you start from OSHA's own Form 301, which is already a fillable PDF ^[4].

Digital forms (Google Forms, Microsoft Forms, or purpose-built safety software) are the best fit for multi-location businesses, shift operations, or anywhere you want automatic routing and notifications. Submit a form and the right person gets an email. Reports can't rot in a filing cabinet. And you can start seeing patterns across incidents over time.

Whatever you pick, the template has to be easy to grab. Workers should reach it without asking permission. If finding the form is a chore, incidents won't get reported. Simple as that.

Building a program from scratch and want a template that ties into your written safety program documents? SafetyFolio's safety program generator produces a set of coordinated forms, including an incident report, tailored to your industry and state.

What are the most common mistakes in incident reports?

The same errors show up again and again.

Blaming the worker. "Employee wasn't paying attention" is not a root cause, and it prevents exactly nothing. Templates that ask only what happened, never why the conditions existed, produce blame-based reports. The safety research literature shows most incidents involve multiple systemic failures, not individual inattention ^[7].

Vague descriptions. "Employee injured back" tells you almost nothing. "Employee felt sharp pain in lower back while manually lifting a 65-pound motor housing from floor level" tells you the task, the weight, and the motion. Specificity is what makes a report worth reading.

Skipping near misses. If workers think near-miss reports lead to discipline, they won't file them. Your policy should state in plain language that near-miss reports are non-punitive. Heinrich's triangle (controversial in its exact ratios, but directionally supported by more recent research) suggests serious injuries are preceded by many more minor events and near misses ^[7]. Catch those signals early.

No corrective action follow-up. Reports that get filed and forgotten do nothing. Build in a field for a follow-up review date, and put a name on who owns that review.

Late completion. A report written a week later comes from memory and misses key details. Whatever policy you set, the first report should be done before the shift ends.

Wrong people completing the form. HR reconstructing an incident from the injured worker's verbal account three days later is a recipe for gaps. The supervisor closest to the incident should complete the investigation section, ideally with the worker's input.

How does incident reporting connect to your written safety program?

Your incident reporting template is one piece of a written safety program. It doesn't stand alone. The data it generates should feed straight into your hazard identification process, your training program, and your program review cycle.

Watch the loop close. A worker reports a near miss on the loading dock: a forklift backing up near pedestrian traffic. The incident report captures the details and pins the root cause: no physical separation between the forklift lane and the walk path. A corrective action gets assigned: install floor markings and barriers within 30 days. The safety program is updated to reflect the new pedestrian traffic policy. Supervisors communicate the change at the next shift meeting. Six months later, the program review cites the incident report as evidence a hazard was found and fixed.

Without the incident report, that loop never closes. The near miss gets mentioned in passing, gets forgotten, and the next event isn't a near miss.

OSHA's written program requirements under standards like hazard communication (29 CFR 1910.1200) and lockout/tagout (29 CFR 1910.147) require employers to review and update their programs when incidents reveal gaps ^[8][9]. Your incident reports are the evidence that triggers those updates.

For more on what a written safety program needs to cover, see our guides on hazard communication and lockout tagout.

If you're overhauling your written program and want a system that connects incident data to your required written plans, SafetyFolio can generate a complete program for your industry in about 15 minutes.

What does OSHA actually require you to report to them vs. keep internally?

Two different obligations, and it pays to be precise about each.

What you report to OSHA directly. Under 29 CFR 1904.39, all employers must report to OSHA any work-related fatality within 8 hours, and any work-related in-patient hospitalization, amputation, or loss of an eye within 24 hours ^[2]. Report by phone to your nearest OSHA area office, or online at osha.gov. The standard says you must report "as soon as practicable after the employer learns of the incident."

What you keep internally. Employers with 11 or more employees in most industries must maintain the OSHA 300 log, Form 300A (the annual summary), and Form 301 (the incident report) for five years following the end of the calendar year ^[4]. The 300A must be posted in the workplace from February 1 through April 30 each year.

What you may have to submit electronically. OSHA's electronic injury reporting rule requires certain employers to submit their 300A summary data annually through OSHA's Injury Tracking Application (ITA). Under the 2024 rule update, establishments with 100 or more employees in designated high-hazard industries must also submit case-specific 300 log data electronically ^[10].

Your internal incident report template sits apart from all of this. There's no OSHA requirement to submit your full internal report to anyone, though you must make OSHA 300 logs available to current and former employees and their representatives under 29 CFR 1904.35 ^[4].

Requirement	Who it applies to	Deadline	Where
Report fatality	All employers	8 hours	OSHA (phone or online)
Report hospitalization/amputation/eye loss	All employers	24 hours	OSHA (phone or online)
Maintain Form 300 log	11+ employees, non-exempt industries	Ongoing, 5-year retention	On-site
Post Form 300A	11+ employees, non-exempt industries	Feb 1 to Apr 30 annually	Workplace
Electronic submission of 300A	20+ employees, high-hazard industries	March 2 annually	OSHA ITA
Electronic submission of 300 case data	100+ employees, designated industries	March 2 annually	OSHA ITA

How do you get workers to actually report incidents and near misses?

This is the hardest part of any reporting program, and forms alone won't crack it. The research on underreporting is clear enough: workers stay quiet when they fear discipline, when they believe nothing will change, or when the process feels like a hassle ^[11].

A few things actually work.

Make reporting easy. A multi-page form for a minor first-aid event creates friction people won't push through. Offer a short initial report (half a page) that workers complete, with a longer supervisor investigation form reserved for serious incidents. QR codes posted near work areas that link to a digital form drop the barrier way down.

Respond where people can see it. A worker reports a near miss and management does nothing visible, and the message lands: reporting is pointless. A worker reports a near miss and the hazard gets fixed within a week, and that story travels the shop floor on its own. Close the loop out loud. Tell the reporting employee what got done.

Separate reporting from discipline. OSHA's anti-retaliation provisions under Section 11(c) of the OSH Act prohibit employers from retaliating against workers who report injuries or hazards ^[6]. Your written policy should say plainly that incident reports are for prevention, not punishment. Then actually live by it.

Train supervisors. Many supervisors believe injury rates reflect their performance, and they're not wrong. The perverse result is that injuries get discouraged from the record instead of prevented in the field. Teach supervisors to read near-miss reports as good news (you caught a hazard before it hurt anyone) and the culture shifts over time.

BLS data shows reported injury rates falling for two decades, but safety researchers keep raising hard questions about whether that's genuine improvement or better underreporting ^[3]. You can't manage what nobody reports.

Can you download a free incident reporting template that meets OSHA standards?

Yes. OSHA's own Form 301 is a free fillable PDF covering the minimum information required for recordable injuries and illnesses ^[4]. Grab it from OSHA's website. For most small businesses, Form 301 plus an added root cause and corrective action section is a perfectly good template.

OSHA also publishes incident investigation guidance that includes sample tools and worksheets ^[5]. Free, and reasonably practical for a small operation.

Beyond OSHA's materials, the National Safety Council, state-plan programs (California's Cal/OSHA, for one), and plenty of insurance carriers publish free templates. Quality varies, but most cover the OSHA 300/301 fields well enough.

What free templates usually miss:

• A structured root cause section (the 5 Whys or a simple causal factor checklist)
• A corrective action tracker with owner and due date
• A near-miss checkbox and a separate near-miss pathway
• Industry-specific fields (construction, electrical, or chemical incidents)

If those gaps matter, building a custom template on top of OSHA Form 301 is about an hour in a word processor. Start with the required OSHA fields, add the root cause section, add the corrective action section, and you're done.

Frequently asked questions

What is the difference between an incident report and an accident report?

Functionally the same thing. "Incident" is the preferred term in occupational safety because it covers near misses and hazardous conditions that didn't cause injury, not only events that harmed someone. "Accident" implies randomness and tends to discourage root cause thinking. Most OSHA standards and the safety profession use "incident." Either term on a form is fine. The content matters more than the label.

How long do I have to report a workplace injury to OSHA?

Under 29 CFR 1904.39, a work-related fatality must be reported within 8 hours of when the employer learns of the death. An in-patient hospitalization, amputation, or loss of an eye must be reported within 24 hours. These deadlines apply to every employer, including those with 10 or fewer employees. First-aid-only injuries and restricted-duty cases don't require direct reporting to OSHA, though they may need to be logged on Form 300.

What injuries are OSHA recordable and have to go on Form 300?

A work-related injury or illness is recordable if it results in days away from work, restricted work or job transfer, medical treatment beyond first aid, loss of consciousness, diagnosis of a significant illness by a healthcare professional, or a needlestick or sharps injury involving contamination. First-aid-only cases aren't recordable. The full definition is in 29 CFR 1904.7. Your template should capture enough detail to make this call correctly.

Does OSHA require me to report near misses?

OSHA has no requirement to report near misses to them or log them on Form 300. Near misses are recorded internally for prevention. That said, OSHA's general duty clause requires employers to address recognized hazards, and a near miss is strong evidence a recognized hazard exists. Not acting on a documented near miss could be used against you in an enforcement action if a serious injury follows.

Who should fill out the incident report form?

The immediate supervisor should complete the investigation sections, ideally with input from the injured worker and any witnesses. The injured worker should complete (or at least review and sign) the section describing what they were doing before and during the event. HR or safety staff may review completed reports for recordkeeping, but shouldn't be the primary investigator. Proximity to the event drives accuracy.

Can I use the same incident report template for a near miss and a recordable injury?

Yes, and you should. A single template covering everything from near miss through serious injury creates consistency and makes patterns easier to spot across event types. Add a field at the top that classifies the event (near miss, first aid, recordable injury, property damage, environmental release) so you can filter reports later. Shorter, faster near-miss forms can still help lift reporting rates for minor events.

How long do I have to keep workplace incident reports?

OSHA requires employers to keep the 300 log, 300A summary, and 301 incident report for five years following the end of the calendar year they cover, under 29 CFR 1904.33. Your internal investigation reports aren't separately specified, but keeping them for the same five-year period is standard practice and smart for workers' comp and liability. Some state workers' comp laws impose longer retention requirements.

What happens if an employee refuses to fill out an incident report?

An employee can't be forced to give a statement, but OSHA requires employers to have a system for reporting work-related injuries and illnesses promptly. Under 29 CFR 1904.35, employees must be able to report injuries without retaliation. Practically, a supervisor or witness can complete the factual portions based on what they observed, noting that the employee declined to provide a statement. Document the refusal on the form itself.

Is an incident report the same as a workers' compensation claim?

No. An internal incident report is your safety documentation. A workers' compensation claim is filed with your insurance carrier and runs through your state's workers' comp system. They overlap because the facts in your incident report often feed the claim, but they're legally distinct. Filing an incident report doesn't automatically open a workers' comp claim, and filing a claim doesn't satisfy your OSHA recordkeeping obligations.

Do I need a separate incident reporting procedure for construction sites?

OSHA's construction standards under 29 CFR 1926 carry some incident-specific requirements, but the recordkeeping rules under 29 CFR 1904 apply to construction the same as general industry. The practical difference: construction sites involve multiple employers and subcontractors, so your procedure should spell out who completes reports when a subcontractor's employee is injured on your site. The controlling employer typically holds the OSHA recordkeeping obligation.

What should I do with incident reports after they're completed?

File them, track the corrective actions, and review them for patterns. At minimum: the supervisor keeps a copy, one goes to your safety file, and each corrective action gets a specific owner and deadline. Quarterly, pull all reports and look for common locations, tasks, equipment, or shifts. That pattern review is where most of the prevention value lives. A report that gets filed and forgotten generates zero safety improvement.

Can incident reports be used against me in a lawsuit or OSHA inspection?

Yes. They can be discoverable in civil litigation, and OSHA has the right to review your injury and illness records during an inspection under 29 CFR 1904.40. That said, thorough reports documenting root causes and corrective actions usually help your case, not hurt it, by showing you found and addressed hazards in good faith. The bigger legal risk is records showing you knew about a hazard and did nothing. Ask an attorney about privilege protections for investigation reports in your state.

What's the best way to track corrective actions from incident reports?

A simple spreadsheet works for most small businesses: list each corrective action, who owns it, the target date, and status. Review it monthly. The failure mode isn't picking the wrong software; it's having nobody accountable for closing out actions. Assign one person (not a committee) to own the tracker. Digital safety tools automate this with notifications, which helps larger operations or anyone juggling more than a handful of open items.

How is an incident reporting template different for a manufacturing facility vs. an office?

The core fields are the same, but the classification options and contributing factor checklists should match the real hazards. A manufacturing template might add fields for machine guarding, lockout/tagout compliance, PPE worn at the time, and production pressure. An office template might add ergonomics, slips and falls, and factors like lighting. Tailoring those sections to your actual work makes the template more useful and signals to workers that it was built for their reality.

Sources

1. Human Factors journal (cited in NIOSH guidance on incident reporting timeliness): Eyewitness recall accuracy and incident detail quality decline significantly when reports are completed more than 48 hours after an event
2. OSHA, 29 CFR 1904.39 Reporting Fatalities, Hospitalizations, Amputations, and Losses of an Eye: Work-related fatalities must be reported within 8 hours; in-patient hospitalizations, amputations, and losses of an eye within 24 hours
3. Bureau of Labor Statistics, Survey of Occupational Injuries and Illnesses, 2023: 2.6 million nonfatal workplace injuries and illnesses in private industry in 2023, a rate of 2.4 per 100 full-time workers
4. OSHA, 29 CFR Part 1904 Recording and Reporting Occupational Injuries and Illnesses: Recordkeeping requirements, Form 300/300A/301, employer size exemptions, and five-year retention requirement
5. OSHA, Incident Investigation guidance page: OSHA guidance describes a process starting at immediate cause and tracing back through contributing and root causes
6. OSHA, Section 5(a)(1) OSH Act General Duty Clause and Section 11(c) Anti-Retaliation: General duty clause requires a workplace free from recognized hazards; Section 11(c) prohibits retaliation against workers who report injuries
7. NIOSH, Hierarchy of Controls and causal factor analysis in workplace safety: Most incidents involve multiple systemic failures; Heinrich's triangle and subsequent research support near-miss reporting as an early warning system
8. OSHA, 29 CFR 1910.1200 Hazard Communication Standard: Hazard communication written program must be reviewed and updated when incidents reveal gaps in existing controls
9. OSHA, 29 CFR 1910.147 Control of Hazardous Energy (Lockout/Tagout): Lockout/tagout program requires periodic review and update, including following any incident involving unexpected energization
10. OSHA, Electronic Submission of Injury and Illness Records rule, updated 2024: Establishments with 100+ employees in designated high-hazard industries must submit case-specific 300 log data electronically by March 2 annually
11. NIOSH, Underreporting of Occupational Injuries and Illnesses: Workers underreport incidents when they fear discipline, believe nothing will change, or find the reporting process burdensome