Incident data and metadata should be collected and protected to ensure their accuracy, authenticity, and traceability.