Incident Management Training for IT Operations

Incident Simulation #1

This is a group exercise. The person leading the exercise should:

  • Appoint someone to be responsible for Tactical Documentation. That person will create a timeline, keep time contracts on assignments, and record the summary of key events.
  • Appoint someone to be responsible for Communications. That person will brief your breakout room’s findings when you return to the main group.


Click here to open Incident Simulation 1 Answer Sheet


  1. What is your opinion of the CAN reports issued by the Incident Commander?
  2. Did the Incident Commander maintain good forward momentum during the trouble shooting?
  3. In your opinion, at the 7:58 point in the recording, the Application team issued a CAN report with recommendations. Do you feel it was a complete report and easy to follow? If not, what recommendations would you make for improvement?