Incident Commander / Key Responder Level 1

RED Sprint 3:
Incident Documentation

Points to Ponder

  • Time is critical in all aspects of incident response
  • The IC is the conductor of the incident response orchestra
  • An effective leader reduces the Mean Time To Restore (MTTR)

Signs: Countable and validated

Symptoms: Subjective and descriptive

Key Learnings

  • One person cannot effectively fill all the Command functions
  • Assigning tasks and keeping SME on track is key to forward momentum in the resolution effort
  • Using all the command roles improves the overall incident response process
GROUP EXERCISE RESOURCE
Scenario Briefing Document

Scenario Briefing

GROUP EXERCISE RESOURCE
Scenario Worksheet

XC Scenario Worksheet
(for use by designated Scribe)

 

EVALUATOR
Group Exercise
Scoresheet

This page is set up for Academy sessions with a live facilitator.