Incident context
In ten minutes and twenty seconds, performance alerts became a production stop and an operational visibility failure. The cause is not confirmed and no decision is free; choose what to protect first, then own the cost of that priority.
Investigator missionDecide what you will protect first, then choose how you will govern the cost of that decision. The outcome is not a right answer; it is the priority you can defend under pressure.
Before you begin
- 01
Separate multi-resource symptoms from the likely failure mechanism
- 02
Order protection of storage, production state, and security evidence under uncertainty
- 03
Define exception and recovery governance during a major operational incident