Locked

Incident Commander Playbook

By the end, you'll understand incident command, how to make decisions under uncertainty, when to escalate, and how to avoid cognitive biases that break response.

Security team leads, incident commanders, security engineers · ~25 min · 5 modules

This course is part of the paid catalog. Purchase it individually, or unlock it with a membership that includes Tier 1 & 2 content.

View pricing & purchase See membership plans

What's inside

01
Your Role as Incident Commander
What you own, what you don't, and how to avoid stepping on toes.
~5 min
02
The First 6 Hours
Decision-making under uncertainty. What to decide. What to document.
~5 min
03
Escalation and Communication
Who needs to know what, when, and how. Escalation framework.
~5 min
04
Cognitive Biases and Traps
Hindsight bias, blame culture, analysis paralysis, and how to avoid them.
~5 min
05
The Post-Mortem
After the incident is resolved, how to run a post-mortem that actually leads to learning.
~5 min