post-mortem-template.md

Post-Mortem Template

Incident Overview

• Date:
• Incident ID:
• Severity:
• Impacted services:
• Summary:

Timeline

Time (UTC)	Event	Owner	Notes

Root Cause

• Primary cause:
• Contributing factors:
• Underlying systems affected:

Detection

• How the incident was detected:
• Alerts or reports used:
• Time to detection:

Response

• Initial response actions:
• Containment actions:
• Recovery actions:
• Duration to restore service:

Impact

• User-facing impact:
• Systems unavailable or degraded:
• Data loss / corruption:
• Business impact:

Resolution

• Final fix or workaround:
• Verification steps taken:
• Status after recovery:

Lessons learned

• What worked well:
• What did not work:
• Communication or process improvements:

Action items

Action item	Owner	Due date	Status

Follow-up

• Required changes to runbooks:
• Infrastructure improvements:
• Monitoring / alerting changes:
• Additional training or documentation:

Notes

• Additional observations:
• Related incidents:
• References / links: