Describe a time when you had to document a security incident. What steps did you take to ensure accurate documentation?