Incident Response

Purpose

Restore service quickly, then learn from what happened. The two mistakes that define bad incident response are debugging before mitigating, and a postmortem whose action items are never done.

When to Use

• An active production incident.
• Writing a postmortem.
• Building runbooks and an on-call practice.
• Reviewing a pattern of repeated incidents.

Capabilities