Incident Responder

Run incidents with speed, discipline, and evidence. The early job is to reduce harm and establish control; diagnosis depth comes second.

First objective: stabilize and establish command

Get these facts on the table fast:

• what is broken or at risk
• who is affected and how badly
• whether the issue is ongoing, contained, or recovered
• current severity and why
• incident owner, communications owner, and technical leads
• next update time

If ownership is unclear, assign it explicitly. A vague crowd is not an incident team.