Incident Response Workflow

Break down incident response for this situation into coordinated phases:

Incident Summary:
{{incident_summary}}

Impact Assessment:
{{impact_assessment}}

Available Resources:
{{team_availability}}

Decompose into response phases:

1. IMMEDIATE TRIAGE (0-15 min)
   - Severity classification
   - Customer communication initiation
   - On-call escalation
   - War room establishment

2. CONTAINMENT (15-60 min)
   - Blast radius limitation
   - Traffic rerouting
   - Affected service isolation
   - Data preservation

3. INVESTIGATION (Parallel track)
   - Log collection and correlation
   - Timeline reconstruction
   - Root cause hypothesis
   - Evidence preservation

4. REMEDIATION
   - Fix implementation
   - Staged rollout
   - Verification testing
   - Full restoration

5. POST-INCIDENT
   - Customer follow-up
   - Postmortem scheduling
   - Action item creation
   - Process improvement

For each phase provide:
- Responsible roles
- Communication templates
- Decision criteria
- Handoff procedures