Incident Response

As a user, I can view a list of active incidents in the RHS so that I get an overview of what’s currently happening.

As a user, I can select an active incident in the RHS to view its detail so that it’s accessible from anywhere.

As a user, I can see and click on the channel associated to an incident in the RHS so that I can quickly navigate to it.

As a user, I can view the commander of all incidents in the RHS without opening it so that I know who’s the point person.

As a user, I can start an incident with a slash command, RHS, or post action so that response can start quickly.

As the user that starts an incident, I default as the commander so that ownership is clear.

As the Incident plugin, a new channel is automatically created when an incident starts so that there is a place to log activities.

As a user, I can choose the name of the new channel so that it’s easily recognized

As the Incident plugin, a message is posted to the channel when the incident starts and ends so there is a timestamp record of who made the change.

As a user, I can see the checklist for each active incidents in the RHS it’s clear what’s been done and what needs to be done.

As a user, I can configure the incident playbook with a checklist so that I save time setting up each future incidents.

As a member of the incident channel, I can check off items for an incident in the RHS so that it accurate represents the team’s progress.

As the Incident plugin, a message is posted to the incident channel when a checklist item has been checked/unchecked so that there is a timestamp record of who made the change.

As a member of the incident channel, I can add items to the end of the incident checklist in the RHS so that the team can adapt to the situation.

As a member of the incident channel, I can remove items from the incident checklist in the RHS so that the team can adapt to the situation.

As a member of the incident channel, I can change the incident commander from the RHS so that it remains accurate.

As the Incident plugin, a message is posted to the incident channel when a checklist item has been checked/unchecked so that there is a timestamp record of who made the change.

As a user, I can see a list of all past and current incidents so that I have a complete record to refer to.

As a user, I can see the detail of any past incident so that I can use it for post-mortem.

As a user, I can see a summary of the following on incident detail page so that I can get the gist at a glance:

• Channel name, start time, duration, last-known commander, total number of messages

As a user, I can see the following actions ordered chronologically so that I can visualize the timeline of the incident:

• Start incident, commander change, checklist item checked and unchecked, end incident

As a user, I can see the total number of incidents so that I can decide how much to invest in proactive prevention.

As a user, I can see the total duration of all incidents so that I can decide how much to invest in proactive prevention.

As a user, I can see in the range and medium duration for all incidents so that I can decide how much to invest in reactive response.