8 — Root Cause Analysis
Purpose
[stub: root-cause-analysis]
Metadata
| Author | Amit Singh |
| Scope | sre |
Local graph
Related notes
6 — Runbooks
Step-by-step operational procedures written before the incident, so 3am execution doesn't depend on anyone's memory of how a system behaves under stress.
7 — Playbooks
Decision trees for ambiguous or novel incidents, one level up from a runbook's fixed steps — how to reason through a failure mode nobody's documented yet.
9 — Five Whys
The simplest RCA technique that works — repeatedly asking why until you hit a structural cause — and where it breaks down on genuinely multi-causal incidents.
1 — Incident Response Lifecycle
Detect, triage, mitigate, resolve, review — the phases every incident moves through, and why skipping the review phase is how the same incident happens twice.