इंसिडेंट प्रबंधन किट

Organisation SEV1 to SEV4 standard, impact criteria, response per level, security track, crisis flag, upgrade and downgrade rules, worked examples

Symptom-based paging, page vs ticket vs log, multi-window burn-rate rules with worked numbers, alert metadata, naming, routing, noise budget, review, alerts as code

IC and response roles, RACI, staffing by severity, declaring and taking command, battle rhythm, decision log, escalation, handover, closing, one-page IC checklist

On-call handbook: rotation and handover, severity examples linked to the matrix, response targets, escalation, first 15 minutes, comms templates, wellbeing

Service runbook: overview, dependencies, dashboards, per-alert diagnosis and mitigation with commands, common tasks, rollback, contacts

Incident comms plan: audiences, severity matrix, roles, cadence, status page and customer messages, executive brief

Planned maintenance notice with times in several time zones, impact, actions required, status link, plus a completion follow-up

Blameless incident postmortem: severity per matrix, impact and error budget, UTC timeline, root cause, 5 Whys, security incident links, action items

Discussion-based exercise pack: objectives and criteria, roles, ground rules, ransomware scenario with injects, questions, facilitator notes, AAR and Improvement Plan

Game day exercise: objectives, scenarios, roles, schedule, safety controls, comms, detection and response scoring, debrief

Evidence of one DR test: SP 800-84 event type, scope, scenario, timeline, RTO and RPO target vs achieved, integrity checks, deviations, findings, actions, sign-off

Quarterly toil review: toil definition tests, measurement method, toil share per engineer vs cap, pages per shift, on-call health, toil inventory, automation ROI ranking, decisions