The useful starting point
Keep event time, record time, source, and uncertainty distinct. A useful timeline shows both the sequence you can support and the gap you still need to resolve.
Decide what each timeline entry represents
Begin by distinguishing an event from the creation of a record about that event. A message sent at 10:12 may describe something that happened earlier. A photograph's capture time is not automatically the time a condition first existed. Write a short event description and a separate source reference before arranging the entries.
For this exercise, use three columns: time or interval, event described, and source. If the timing is unknown, say unknown. The aim is a readable account of the available sequence, not a continuous story with every minute filled.
The fictional delivery-room record set
An empty display stand is found beside its marked position. The following invented records are supplied for classroom analysis; nobody is asked to inspect or recreate a real event.
| Time shown | Record | What belongs on the timeline |
|---|---|---|
| 10:02 | Room access log A | A recorded entry, subject to the log's meaning |
| Between 10:00 and 10:10 | Witness account B | Witness reports seeing the stand moved |
| 10:12 | Message C | Message reports finding the stand out of position |
| 10:20 | Photograph D | Condition visible when photographed |
The broad witness interval overlaps the access entry. It does not establish that the person recorded entering moved the stand.
Keep intervals and unknown relationships visible
Place the entries in an approximate order, but preserve the interval as an interval. Do not move the witness event to 10:02 simply because that is the nearest precise timestamp. Add a note that the relationship between the access event and the movement remains unestablished. You can represent a gap in words without inventing an event to bridge it.
Next, choose one question that could change the sequence: does account B describe a time checked on a clock or an estimate made later? A more accurate interval could help; a confident restatement of the same estimate would not create new precision.
Read the timeline as someone unfamiliar with the case
Ask whether a reader can trace each entry to its source and tell which timings are estimates. Then write a short summary: the supplied records describe access, reported movement, a later discovery message, and an after-event image; they do not identify who moved the stand. This summary preserves the useful sequence without pretending it explains the cause.
Use a separate analysis note for possible explanations. The timeline can support that reasoning, but ordering events alone does not establish why they occurred. For conflicts between clock readings, continue with the timestamp-conflict exercise.
Check your reasoning.
Message C was sent at 10:12. Can you label 10:12 as the time the stand moved?
Open the suggested reasoning
No. That is the message time. The supplied message reports a discovery; the movement could have happened earlier. Preserve the known record time and the unresolved event time.
An original learning exercise from NCSO Prep, not an official exam question.
Sources and scope
Source review: . The examples and study methods are NCSO Prep editorial material. Official requirements and workplace decisions must be checked against the applicable current source.
- CCOHS: Incident Investigation
Background; worked examples are original.