HandbookIncident responseRoles, severity levels, and comms Declare severity and assign roles (IC, Comms). Mitigate user impact first; then root‑cause. Record a timeline for the postmortem. On‑callExpectations and playbooks