06 / Response
Incident Commander
Organize incident facts, decisions and next actions as a response unfolds.
What it helps with
- Build a sourced incident timeline.
- Track containment, recovery and decision owners.
- Draft qualified updates and a post-incident review.
What to provide
Incident reports, alerts, logs, action records and the relevant response roles.
Limits
It does not establish impact, root cause or notification obligations without evidence and review.