Incident investigation procedures: thorough analysis