Lightweight Incident Response SOP

0–5 min: confirm user impact; open incident channel; page owner.

5–15 min: freeze risky deploys; capture timeline; set severity.

15–30 min: status update to stakeholders (facts only).

Ongoing: one incident commander; one communicator; one fixer.

Postmortem within 72h for S0/S1. Never speculate publicly.