Locked

Incident Commander Playbook

Understand incident command fundamentals: your role, how to make decisions under uncertainty, when to escalate, and how to avoid cognitive biases.

Security team leads, incident commanders, on-call leads · ~18 min · 5 modules

This course is part of the paid catalog. Purchase it individually, or unlock it with a membership that includes Tier 1 content.

What's inside

01
Your Role as Incident Commander
What you own, what you don't, and how to avoid stepping on toes.
~4 min
02
The First 6 Hours
Decision-making under uncertainty. What to decide and what to document.
~4 min
03
Escalation and Communication
Who needs to know what, when, and how. Escalation framework.
~4 min
04
Cognitive Biases and Traps
Common thinking errors under stress, and how to avoid them.
~3 min
05
The Post-Mortem
After the incident is resolved, how to run a post-mortem that leads to learning.
~3 min