Templates
Security SpecialistOperations & StrategyDevOps
🔑 Key Takeaway: Practice incident log, post-mortem, and runbook templates before the first real page-out. Format familiarity under calm conditions ends format thrash during emergencies.
Templates for incident response documentation. Copy these when needed.
Review these templates before your first incident. Familiarize yourself with the structure so you're not learning the format during an emergency. Consider running a tabletop exercise to practice filling them out.
What this framework covers
- Incident Log Template: copy when declaring an incident.
- Post-Mortem Template: copy after resolving a significant incident (P1-P3).
- Runbook Template: copy when creating a new scenario-specific runbook.
- Example Incident Log: filled-out incident log for format reference.
- Example Post-Mortem: filled-out post-mortem for format reference.
For communication guidance and examples, see Communications.
See Runbooks for existing scenario runbooks, and Incident Response Policy for the full response process.
Further reading
- Incident Response Template overview: how the template pieces fit together
- Incident Log Template: fill out during an incident
- Post-Mortem Template: complete after an incident
- Runbook Template: structure for writing your own runbooks