8.8.2 Incident Monitoring, Reporting, and Investigations
This section outlines the procedures that the organization must establish and maintain for incident monitoring, reporting, investigations, disciplinary actions, and remediation. These procedures are essential for addressing various types of incidents and ensuring transparency and accountability. Here's a detailed breakdown of the requirements:
- Types of Incidents to be Addressed:
The organization's procedures should cover a wide range of incidents, including but not limited to:
- Incidents involving the use of force or weapons.
- Any casualties or physical injuries.
- Allegations of abuse.
- Loss of sensitive information or equipment.
- Substance abuse by personnel.
- Non-conformance with the principles of the Montreux Document and the ICoC.
- Violations of applicable laws and regulations.
- Incident Reporting and Investigation Process:
The procedures should define a clear process for handling incidents, including the following steps:
a) Documentation of the Incident: All incidents must be thoroughly documented, including relevant details, evidence, and circumstances.
b) Notification of Appropriate Authorities: When necessary or required by law, the organization should notify the relevant authorities about the incident.
c) Investigation: A formal investigation process should be initiated to determine the facts, causes, and responsible parties involved in the incident.
d) Identification of Root Causes: The investigation should aim to identify the root causes of the incident to prevent similar occurrences in the future.
e) Corrective and Preventive Actions: Based on the investigation findings, the organization should take corrective actions to address immediate issues and implement preventive measures to avoid similar incidents in the future.
f) Compensation and Redress: If applicable, the organization should provide compensation and redress to the affected parties as part of the remediation process.
- Awareness and Responsibilities:
The organization must ensure that all individuals working on its behalf are aware of their responsibilities and the mechanisms for monitoring and reporting non-conformances and incidents. This includes providing training and clear communication about reporting procedures.
- Record Keeping:
Records of non-conformances and incidents must be maintained and retained for a minimum of seven years or as specified by legal or regulatory requirements. Proper record-keeping ensures accountability and transparency.
By establishing and following these incident management procedures, the organization demonstrates its commitment to addressing incidents promptly, fairly, and in compliance with legal and ethical standards. It also contributes to the organization's continuous improvement and risk mitigation efforts.
