← Incident Manager: coordination, recovery, and learning
02 / 6 · 40 MIN

Command, delegation, and shared state

Organize responsibilities without creating parallel command during recovery.

Concept and mechanism

Incident coordination needs an identified person, understood roles, and a recognized place for tracking decisions. Response scale can require operational leadership, communications, recording, and specialist subteams. The coordinator follows the whole situation and removes blockers; implementers need context and space to work. A useful task names a person, an action, the expected result, and a return time. Confirm that the request was understood. A living record should highlight current impact, ongoing actions, owners, decisions, hypotheses, and upcoming updates. Preserve the change sequence to avoid incompatible or repeated interventions.

Guided application

In a fictional middleware incident, network and application specialists propose simultaneous changes. Ask them to explain the objective, risk, and expected evidence, then agree a coherent sequence with operational leadership. If parallel investigations are needed, assign one owner per workstream and define when information returns to coordination. Parallel analysis does not imply permission to change production. If a senior manager joins the call, brief them through the appropriate channel and keep coordination ownership explicit. Hierarchical seniority does not constitute a handover. If a leadership change makes sense, conduct a handover recognized by everyone within the local mandate.

IN PRACTICE

An unacknowledged task may remain unperformed even if it was spoken aloud.

Common pitfalls

Requests to an unnamed someone; parallel changes; command by job title; stale records.

Related topics: Declaration, impact, and priority · Communication and uncertainty · Mitigation decisions and evidence

Take this idea with you

Delegate with ownership and a return point while maintaining a shared incident view.

Create account

Reference: Managing Incidents · Google SRE incident guidance; PagerDuty contextual incident model; NIST SP 800-61 Rev. 3 April 2025; editorial review 2026-10-01