What is the proper procedure to be used in the preparation and further handling of hospital incident reports in order to protect them from discovery in lawsuits?