Incident Report
Overview
Incident reports create a reliable record for learning and accountability. They focus on facts, timeline, impact, and improvement — not blame.
When to Use
- Production or operational incidents
- Security incidents
- Safety or compliance incidents
- Significant customer-impacting events
Recommended Structure
- Summary (what, when, impact)
- Timeline of key events
- Impact assessment
- Detection and response actions
- Root cause analysis
- Contributing factors
- Corrective and preventive actions
- Lessons learned
- Appendix (logs, graphs, evidence)
Principles
- Stick to verifiable facts in the timeline
- Quantify impact where possible
- Separate immediate fixes from longer-term improvements
- Assign owners and due dates to action items
- Write so someone uninvolved can understand the event
Verification
- Timeline is clear and factual
- Impact is described concretely
- Actions have owners
- Root cause analysis goes beyond the surface symptom