Structure
Incident Summary
Brief description of the incident, affected systems, and duration.
Timeline of Events
Chronological sequence of what happened, from detection to resolution.
Root Cause Analysis
Technical root cause, contributing factors, and why detection/prevention failed.
Impact Assessment
User impact, business impact, affected customers, and financial implications.
Response & Resolution
How the incident was detected, escalated, debugged, and ultimately resolved.
Lessons Learned
What went well, what didn't, and key insights from the incident.
Action Items
Specific improvements to prevent recurrence, improve detection, or speed up response.