9 — Five Whys
Purpose
[stub: five-whys]
Metadata
| Author | Amit Singh |
| Scope | sre |
Local graph
Related notes
6 — Runbooks
Step-by-step operational procedures written before the incident, so 3am execution doesn't depend on anyone's memory of how a system behaves under stress.
7 — Playbooks
Decision trees for ambiguous or novel incidents, one level up from a runbook's fixed steps — how to reason through a failure mode nobody's documented yet.
8 — Root Cause Analysis
Moving past 'a bad deploy caused it' to the systemic condition that let a bad deploy reach production undetected in the first place.
1 — Incident Response Lifecycle
Detect, triage, mitigate, resolve, review — the phases every incident moves through, and why skipping the review phase is how the same incident happens twice.