## Why Documentation Matters

If you didn't document it, it didn't happen.
In a legal case, your notes are evidence.

### Who reads your report?
1.  **Other Analysts**: "Has this happened before?"
2.  **Your Boss**: "Is the team busy? Do we need more budget?"
3.  **The Auditors**: "Did you follow the process?"
4.  **The Lawyers**: "Did we exercise due diligence?"

### Types of Documentation
*   **Ticket Notes**: Rough, real-time notes inside the case.
*   **Incident Reports**: Formal summary after the fact.
*   **Runbooks/SOPs**: Instructions on *how* to do things.
*   **Change Logs**: Records of system modifications.

### The Bus Factor
If you are the only one who knows how the firewall works, and you get hit by a bus (or win the lottery), the company fails. Documentation increases the "Bus Factor".