Incident Handling Runbook

Declare an incident when customer-facing checkout, authentication, billing, inventory, or notification workflows exceed SLO burn thresholds. Assign incident commander, communications lead, and service owner.

The incident timeline must capture detection time, customer impact, mitigation, root cause, and follow-up actions. Every Sev2 or higher requires a post-incident review and at least one tracked remediation issue.