2.2 Factual Extraction from Incident Reports, Affidavits, & Witness Statements
Key Takeaways
Incident narratives and affidavits are read for the core facts: who, what, when, where, why and how.
Reports are often written in the order the officer investigated, so the true sequence of events must be rebuilt from the times given.
An officer's own observations must be kept separate from what witnesses reported and from anyone's opinions or guesses.
The CYMBALS checklist (color, year, make, body style, additional features, license, state) organizes vehicle descriptions.
2.2 Factual Extraction from Incident Reports, Affidavits, & Witness Statements
On the NCJOSI, questions assessing incident reports, sworn affidavits, and witness statements evaluate your ability to rapidly process raw investigative text, isolate relevant factual data, and organize fragmented information into a coherent operational picture. Law enforcement officers spend a significant portion of their careers reading, writing, and reviewing narrative documentation. A missed detail in an arrest affidavit can result in suppressed evidence, while a misread vehicle descriptor can allow a fleeing suspect to slip past a perimeter cordon.
These reading skills map onto two NCJOSI² abilities. Verbal comprehension items ask you to recall details and meaning from a passage, and IOS's information-gathering items can present several witnesses' statements and ask you to link information between them. The sample report below is practice material written in that style.
Anatomy of Police Narrative Reports and Sworn Affidavits
Police documents are structured to serve distinct administrative and constitutional functions. Understanding the internal organization of these records allows you to rapidly pinpoint specific categories of data without rereading entire documents.
| Document Component | Typical Section Contents | Key Information to Extract | Common Examination Pitfalls |
|---|---|---|---|
| Header & Administrative Metadata | Incident number, report date/time, dispatch code, assigned beat, reporting officer badge number. | Exact timestamps of dispatch vs. on-scene arrival; primary reporting officer identity. | Confusing the report filing date/time with the actual time the crime occurred. |
| Initial Observation / Scene Arrival | Officer's initial sensory observations upon arriving at the physical location. | Physical state of doors/windows, lighting, weather, visible weapons, injured parties. | Mistaking what the officer was told upon arrival for what the officer personally saw. |
| Victim & Witness Statements | Verbatim or summarized statements provided by victims, witnesses, or reporting parties. | What witnesses claim they saw, heard, or experienced; descriptions of actors. | Treating witness assertions as established objective facts rather than unverified statements. |
| Suspect & Vehicle Identifiers | Physical descriptions, attire, scars/marks, vehicle license numbers, make, model, color. | Exact physical descriptors; direction of travel; method of flight (foot vs. vehicle). | Confusing conflicting witness descriptions or blending two distinct suspects into one. |
| Physical Evidence & Chain of Custody | Description of seized property, recovered weapons, latent prints, narcotics packaging. | Item numbers, exact recovery locations, seizing officer, logging timestamps. | Overlooking gaps in the chain of custody or misidentifying which officer impounded an item. |
| Disposition & Action Taken | Arrest status, hospital transport, booking facility, warrants requested, notifications made. | Where evidence was booked; which specialized units were notified (Detectives, Forensics). | Assuming an arrest occurred when the narrative merely notes that a warrant was sought. |
Note
A Probable Cause Affidavit differs from a routine incident narrative in that it is a sworn legal document submitted under oath to a magistrate or judge. Every statement in an affidavit must establish factual grounds for an arrest, search, or seizure. Questions based on affidavits test whether the stated facts legally support the specific action taken.
Chronological Timeline Reconstruction
Narrative police reports are rarely written in strictly linear chronological order. Officers typically document events in the sequence in which they investigated them: arriving at the scene, interviewing the victim about an event that occurred thirty minutes earlier, recovering a discarded weapon located two blocks away by a secondary unit, and finally interviewing a neighbor who observed suspicious activity hours prior.
Rebuilding the actual sequence from an out-of-order narrative is the same skill IOS's information-gathering items test when they ask for the most logical order of a witness's statements (Section 8.1).
The Three Timelines of an Incident Report
To avoid confusion, mentally separate every scenario into three distinct timelines:
- The Crime Timeline: When the criminal act actually occurred (e.g., suspect enters store at 20:45, demands cash at 20:47, flees out the west exit at 20:50).
- The Response Timeline: When the police system engaged (e.g., victim calls 911 at 20:52, CAD dispatches Unit 12 at 20:54, Unit 12 arrives on scene at 20:59).
- The Investigation Timeline: When specific facts were discovered (e.g., Officer interviews witness at 21:15, secondary officer locates discard bag at 21:35, detective reviews surveillance video at 22:10).
Concrete Incident Report Passage: Case Report #2026-08412
Metropolitan Police Department — Incident Narrative Report Incident ID: 2026-08412 | Date of Report: October 12, 2026 Offense: Burglary in Progress / Commercial (Occupied) Location: Apex Electronics, 1420 North Meridian Avenue, Sector 3 Reporting Officer: Officer R. Vance, Badge #4188
Narrative: At 23:14 hours, Officer Vance (Unit 312) was dispatched to 1420 North Meridian Avenue regarding an audible commercial burglary alarm. Officer Vance arrived at the location at 23:19 hours. Upon arrival, Officer Vance conducted a perimeter walk and observed that the rear metal delivery door was propped open approximately six inches with an empty wooden shipping pallet. Officer Vance noted fresh scuff marks on the concrete threshold and observed a dropped pair of black heavy-duty work gloves lying three feet outside the rear door.
At 23:22 hours, Officer Vance requested backup, and Officer Morales (Unit 315) arrived at 23:26 hours. Officers initiated a tactical interior sweep at 23:28 hours. At 23:31 hours, officers located witness Marcus Finch (custodial employee) locked inside the second-floor utility closet.
Witness Finch provided a sworn verbal statement indicating that while emptying waste receptacles on the first floor at approximately 23:05 hours, he heard glass shattering toward the front showroom. Finch stated he immediately turned off the hallway lights and fled up the south staircase to the second floor. Finch stated that at approximately 23:08 hours, as he reached the landing, he looked down through the atrium railing and observed a lone male individual standing by the tablet display case. Finch described the male as approximately 5'10" to 6'0" in height, medium build, wearing a dark gray hooded sweatshirt, dark denim jeans, and a reflective lime-green safety vest over the hoodie. Finch stated the male was carrying a red canvas duffel bag. Finch stated he heard the main building alarm activate at 23:12 hours, at which point the suspect ran out through the rear hallway toward the loading dock. Finch then barricaded himself in the utility closet.
At 23:38 hours, Officer Morales recovered a red canvas duffel bag containing four sealed tablet computers from the dumpster enclosure adjacent to the alleyway fifty feet north of the rear exit. Officer Vance took custody of the duffel bag at 23:42 hours, logged it as Evidence Item #1, and secured it in the trunk of Patrol Unit 312 at 23:45 hours.
Timeline Analysis Table
| Event Time | Event Type | Description | Source / Status |
|---|---|---|---|
| 23:05 | Crime Event | Glass shatters in showroom; Finch flees to second floor. | Witness Statement (Finch) |
| 23:08 | Crime Event | Finch observes suspect in atrium with duffel bag. | Witness Statement (Finch) |
| 23:12 | Crime Event | Building alarm triggers; suspect flees toward dock. | Witness Statement (Finch) |
| 23:14 | Response Event | Unit 312 dispatched to alarm call. | Official CAD Dispatch Record |
| 23:19 | Response Event | Officer Vance arrives on scene; observes propped door and gloves. | Direct Firsthand Observation |
| 23:22 | Response Event | Officer Vance calls for backup. | Official Radio Communication |
| 23:26 | Response Event | Officer Morales arrives on scene. | Direct Firsthand Observation |
| 23:28 | Investigation Event | Tactical sweep commences. | Direct Firsthand Observation |
| 23:31 | Investigation Event | Finch located locked in utility closet. | Direct Firsthand Observation |
| 23:38 | Investigation Event | Red duffel bag discovered in alley dumpster enclosure. | Officer Morales Discovery |
| 23:42 | Evidence Event | Officer Vance assumes custody of red duffel bag. | Chain of Custody Record |
| 23:45 | Evidence Event | Evidence Item #1 secured in Patrol Unit 312 trunk. | Chain of Custody Record |
Firsthand Observations vs. Hearsay and Opinion
A useful reading discipline is distinguishing between what the reporting officer personally observed with their own senses and what was relayed by third parties. Questions about who saw, heard or did what are a common way to check careful reading.
The Three Categories of Narrative Information
-
Direct Sensory Observations (Firsthand Facts):
- What the officer saw, heard, smelled, or touched directly.
- Characteristics: Objective, sensory, verified by the officer's physical presence.
- Examples: "Officer observed tire marks measuring 42 feet in length", "Officer detected a strong odor of burnt cannabis", "Officer found the cash register drawer ajar on the floor".
-
Hearsay Statements (Second-Hand Information):
- Statements made by victims, witnesses, informants, or dispatch operators recounting events the officer did not see.
- Characteristics: Dependent entirely on the credibility and perception of the speaker; the officer can only vouch that the statement was made, not that the contents are objectively true.
- Examples: "The clerk stated the robber displayed a black semi-automatic pistol", "Witness Jones stated the sedan ran the red light".
-
Subjective Impressions & Emotional Conjecture:
- Opinions, guesses, or psychological characterizations provided by witnesses or inexperienced officers.
- Characteristics: Evaluative rather than factual; introduces speculation.
- Examples: "The victim believed the suspect seemed angry at the company", "Witness stated the driver was definitely intoxicated because he looked mean".
Statement Classification Guide
| Narrative Excerpt | Category | Evidentiary Status on NCJOSI |
|---|---|---|
| "Officer observed a dropped pair of black heavy-duty work gloves lying three feet outside the rear door." | Direct Observation | Verified Fact. Established directly by the officer's sensory observation. |
| "Witness Finch stated that at approximately 23:08 hours, he observed a lone male individual standing by the tablet display case." | Hearsay / Witness Statement | Reported Statement. It is a fact that Finch said this, but the suspect's presence and clothing are witness reports, not direct officer observations. |
| "Witness Finch believed the suspect must have worked at the facility because he seemed familiar with the layout." | Subjective Speculation | Unsubstantiated Opinion. An assumption with no verified factual baseline in the narrative. |
| "Officer Morales recovered a red canvas duffel bag containing four sealed tablet computers from the dumpster." | Direct Observation (Secondary Unit) | Verified Fact. Established by participating law enforcement personnel. |
Important
When a question asks, "Which of the following did Officer Vance personally observe?", you must eliminate any information provided by Witness Finch, even if that information is described in vivid detail in the report. Only select facts that Officer Vance directly perceived.
Extracting Descriptors and the Physical Chain of Custody
Suspect Descriptors and the CYMBALS Framework
Reading questions often check attention to detail in suspect and vehicle descriptions. Police dispatch and report-writing training uses simple checklists to organize this data:
-
Suspect Descriptors: Physical descriptors should be logged from head to toe, noting race, sex, age, height, weight, hair color/style, eye color, facial hair, unique identifying marks (scars, tattoos, birthmarks), and clothing layers from outermost to innermost.
-
Vehicle Descriptors (CYMBALS):
- Color (e.g., maroon)
- Year (e.g., 2018, or an estimate such as late 2010s)
- Make, and model if known (e.g., Ford Explorer)
- Body style (e.g., 4-door SUV)
- Additional identifiers (e.g., dented rear bumper, roof rack, aftermarket wheels)
- License plate number (e.g., 7XYZ89)
- State of issuance (e.g., Ohio)
Some agencies teach the same list as CYMBAL, with the state folded into the license entry.
Physical Evidence Chains and Preservation
Evidence items must be tracked from discovery to final disposition. When reviewing evidence text, isolate:
- Source/Location: Where the item was physically located (e.g., "three feet outside rear door" vs. "dumpster enclosure fifty feet north").
- Discovering Officer vs. Seizing Officer: Who found it vs. who assumed formal custody.
- Packaging & Security: How the item was protected against tampering or degradation (e.g., sealed in an evidence bag, secured in unit trunk).
Based on Case Report #2026-08412, which of the following lists the events in their exact chronological order of occurrence?
Officer Vance arrives on scene -> Building alarm activates -> Witness Finch flees to utility closet -> Officer Morales recovers red duffel bag
Witness Finch observes suspect in atrium -> Officer Vance is dispatched -> Building alarm activates -> Officer Vance calls for backup
Glass shatters in showroom -> Officer Vance arrives on scene -> Building alarm activates -> Witness Finch flees to second floor
Witness Finch observes suspect in atrium -> Building alarm activates -> Officer Vance arrives on scene -> Red duffel bag recovered from dumpster
Based solely on the narrative text of Case Report #2026-08412, which of the following facts was established through the direct firsthand sensory observation of the primary reporting officer, Officer Vance?
A pair of black heavy-duty work gloves was lying on the ground three feet outside the rear delivery door.
A lone male intruder wearing a lime-green safety vest stood by the tablet display case inside the atrium.
A red canvas duffel bag containing four sealed tablet computers was resting inside an alleyway dumpster.
The intruder shattered the front showroom glass window at approximately 23:05 hours.
An investigating detective reviewing Case Report #2026-08412 prepares a Be On the Lookout (BOLO) broadcast for the fleeing commercial burglary suspect. Which combination of physical descriptors and items strictly reflects Witness Finch's sworn statement?
Male, 5'6" to 5'8", heavy build, wearing a dark gray hoodie, dark denim jeans, and carrying a black duffel bag.
Male, 5'10" to 6'0", medium build, dark gray hoodie under a lime-green safety vest, dark denim jeans, carrying a red canvas duffel bag.
Male, height unknown, wearing a reflective lime-green jumpsuit, black work boots, and carrying a cardboard box.
Male, 6'0" to 6'2", thin build, wearing a black leather jacket over a gray hoodie, dark jeans and black heavy-duty work gloves, and carrying a red duffel bag.
Sections you finish are checked off in the contents.