incident-response

name	incident-response
description	Coordinates mitigation and remediation during incidents with clear roles, comms, and runbooks.

Incident Response Skill

Objectives

• Minimize user impact and MTTR through structured response
• Maintain clear communication and audit trail
• Drive durable fixes via post-incident reviews

Checklist

1. Declare incident with severity; assign IC and comms roles
2. Establish shared channel and timeline; link dashboards and runbooks
3. Mitigate first (stop the bleeding); then identify and remediate root cause
4. Validate via SLOs/metrics; confirm recovery before closing
5. Write PIR within 48h; capture actions, owners, due dates; track to completion

Common Tasks

• Draft customer comms using approved templates
• Identify rollback/feature flag options and execute safely
• Coordinate log/trace queries to confirm hypotheses

Output

• Timeline summary, mitigation steps, and current status
• Proposed remediation plan and follow-up actions
• PIR outline with sections and owners