Structure
Summary. Timeline. Root cause (with 5 whys). Impact. Mitigation. Action items with owners + due dates.
Advertisement
Blameless
People act reasonably given info at the time. Focus on systemic gaps: missing monitoring, unclear runbook, complex code.
Advertisement
Timeline detailed
Every action, every observation, every decision. Timestamps. Enables understanding what happened when.