Keep incident documentation clear, factual, and traceable. Include:

  • System name and version

  • Date/time of event

  • Description of what happened

  • Impact (actual or potential)

  • Root cause or hypothesis

  • Actions taken (e.g., escalation, fixes, communications)

  • People notified and involved

📌 Use a shared template to maintain consistency.