Use this template during active incidents. The Scribe owns this document.
How to Use
Copy this template to your incident logs folder
Name it: YYYY-MM-DD-brief-description (e.g., 2024-03-15-api-outage)
Update in real-time as things happen
Use UTC timestamps, 24-hour format
More detail is better. You can summarize later
Incident:
TITLE
Summary
Field
Value
Status
Active / Mitigated / Resolved
Severity
P1 / P2 / P3 / P4 / P5
Start Time
YYYY-MM-DD HH:MM UTC
Resolution Time
Affected Services
Roles
Role
Person
Detector
Incident Leader
Scribe
Communication Manager
Responders
Communication Channels
Call: [link]
Chat: [channel]
Timeline
HH:MM UTC - Incident detected by [who/what]
HH:MM UTC - [Person] assigned as Incident Leader
HH:MM UTC - [Person] assigned as Scribe
HH:MM UTC - Initial assessment: [description]
HH:MM UTC - ...
