A simple review format for learning after incidents without turning every problem into a bureaucratic meeting.
After an incident, the goal is to keep the useful memory: timeline, impact, evidence, recovery, root causes and prevention.
Capture detection, response, mitigation and recovery times.
Identify users, leads, revenue, content, campaign or operation affected.
Choose small improvements with owners and validation dates.
Go deeper when the cause is unclear.
Open routeUse a repeatable review format.
Open routeReduce business interruption.
Open routeLong enough to preserve learning and short enough to actually happen.
People who detected, fixed, owned or were affected by the incident.