Skip to content

Incident Response Plan

Template Library

Incident Response Plan

Define operational incident types, severity levels, first responders, escalation, response steps, communication, and evidence preservation.

ES-111 Incidents Response Readiness
Library AreaTemplate Library
Current PageIncident Response Plan
FocusIncidents
UseResponse Readiness
Repository Areadocs/template-library/operations/
← Previous Monitoring and Observability Plan
Current Incident Response Plan
Next → Rollback and Stop Plan

Template purpose

Use this template to define how operational incidents will be recognized, handled, escalated, evidenced, and communicated.

Project

<Project name>

Document control

Field Value
Artifact owner <owner>
Primary reviewers <reviewers>
Status <draft / in review / accepted / revised>
Last updated <YYYY-MM-DD>
Related Engineering Stage ES-111 — Operational Readiness
Project workspace target docs/project-workspace/operations/incident_response_plan.md

Operational incident types

Incident Type Examples First Responder Escalation Evidence
<type> <examples> <role> <owner> <artifact>

Severity levels

Severity Description Response Expectation Authority
Low <description> <expectation> <authority>
Medium <description> <expectation> <authority>
High <description> <expectation> <authority>
Critical <description> <expectation> <authority>

Response steps

  1. <step>

Evidence to preserve

Evidence Trigger Owner Location
<evidence> <trigger> <owner> <location>

Communication expectations

Audience Message / Timing Owner
<audience> <message/timing> <owner>

Escalation rules

Trigger Escalate To Expected Action
<trigger> <owner/role> <action>

AI / automation incident handling

Scenario Response Evidence
<scenario or not applicable> <response> <evidence>

Open incident response questions

Question Owner Needed By
<question> <owner> <date/stage>

Review checklist

  • [ ] Incident types are defined.
  • [ ] Severity levels are defined.
  • [ ] First responders and escalation owners are assigned.
  • [ ] Evidence preservation is defined.
  • [ ] Communication expectations are defined.
  • [ ] AI/automation incident handling is addressed or marked not applicable.

Continue to Rollback and Stop Plan

Proceed to the next ES-111 operational readiness artifact.

Open Rollback and Stop Plan →