https://besterry.com/tags/process/Recent content in Process on Besterry — Linux & DevOps NotesHugoen-usSun, 22 Dec 2024 00:00:00 +0000https://besterry.com/posts/incident-response-playbook/Sun, 22 Dec 2024 00:00:00 +0000https://besterry.com/posts/incident-response-playbook/<p>Most incident playbooks end up as wiki pages nobody reads during an actual incident. Here&rsquo;s what survives contact with a real 3am pager.</p> <h2 id="the-first-five-minutes">The first five minutes</h2> <p>One person is the Incident Commander (IC). If that&rsquo;s not clear, declare yourself IC.</p> <ol> <li>Acknowledge the page</li> <li>Post in #incidents: &ldquo;Incident: [brief]. I am IC.&rdquo;</li> <li>Start a timeline document (even just a text file)</li> <li>Check public status page — update if user-visible</li> </ol> <p>Don&rsquo;t dig into the problem yet. Set up the command structure first.</p>