Sort The Core Incident Roles By What They Actually Own
Differentiate incident command, technical execution, communication, and record-keeping responsibilities.
Place each responsibility in the role that should own it first during a live incident. Incident Commander Technical Lead Comms Lead Scribe Sets the next 15-minute objective and resolves tradeoffs between teams Chooses between rollback, failover, or targeted mitigation approaches Publishes the scheduled update to support and leadership Captures the timestamp when checkout failures first exceeded threshold Reassesses severity based on changed customer impact Verifies whether the workaround is durable in production metrics Translates partial technical findings into a fact-based external update Keeps the timeline of decisions, actions, and observed signals coherent
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in