methodatlas

Operations Operating practice

Runbook

Describes a repeatable operational procedure with a trigger, safe steps, decision points, and escalation.

A runbook describes a repeatable operational procedure with a trigger, safe steps, decision points, and escalation. It makes prerequisites and limits visible so the next step can be justified.

Core question
Can an authorized responder under pressure safely tell when and how to use this procedure?
Participants
1-4
Time
20-60 min

Phases may be revisited; their order supports the work but does not replace domain judgment.

Runbook workspace showing the question, observations, and next decision.
  1. Trigger

    Define trigger and scope

    Describe symptoms, service, prerequisites, and explicit non-applicability.

  2. Procedure

    Write safe steps

    Order reversible diagnostics before changes; state expected results and stop conditions.

  3. Escalation

    Define escalation and recovery

    Name roles, limits, escalation, rollback, and success criterion.

  4. Maintenance

    Exercise and maintain

    Have another person test the steps; version owner, change date, and review date.

Review the result and open assumptions at the next suitable checkpoint. Record changes, ownership, and new evidence.

A good fit when

Use when: A recurring operational procedure with a defined trigger and expert owner for validation.

Ideal for

  • On-call Tasks
  • Incident Response
  • Repetitive Operations

Not good for

  • Open discovery
  • New strategic work

Outputs

  • Working picture

    The working picture covers symptoms, the affected service, prerequisites, and explicit cases where the procedure does not apply.

  • Testable evidence

    The evidence description records roles, limits, escalation, rollback, and the success criterion.

  • Next step

    The next-step record contains a second-person test and the owner, change date, and review date for the version.

Trigger, diagnosis, escalation, and recovery

Fictional worked example

Document a repeatable operational procedure with trigger, safe steps, decision points, and escalation.

Trigger

Define signal, service, prerequisites, and non-applicability.

Queue age >5 min across three measurements; service: payments-consumer.

Diagnose

List read-only checks with expected results.

Dashboard → consumer health → last change; record timestamps and finding.

Action

Record authorization, escalation contact, and recovery path.

Scale only with approval; if data loss suspected, do not purge, escalate to Incident Commander.

Verify

Record tester, exercise date, owner, and freshness.

Queue age <1 min for 10 minutes; otherwise rollback and escalate. Owner SRE; review Sep 30.

Fictional runbook “Investigate queue backlog”: trigger: queue age >5 min for 3 measurements; check impact and dashboard; inspect consumer health and recent changes; scale only after approval; if data loss is suspected, do not purge and page Incident Commander; success: age <1 min for 10 min.

Being On-Call · Google SRE Workbook

First step

Start with a bounded question, clarify access and participants, and collect available evidence. Document a repeatable operational procedure with trigger, safe steps, decision points, and escalation.

Open the method guide

Deep dive

Purpose

For recurring operational tasks or incidents, the method keeps solid action logic ready. It reduces uncertainty when time pressure, role changes, or rare situations demand fast access.

How it works

Knowledge is condensed along concrete situations so intervention, safeguards, and escalation fit together. This makes implicit experience usable for cover, on-call duty, and automation. Regular maintenance keeps the instructions in sync with the actual state of the system.

In detail

A Runbook makes experience actionable when a situation is rare, critical, or recurs under time pressure. Clarity comes from prerequisites, checkable steps, rollback logic, and escalation points. It only stays reliable if it is tested, adjusted after incidents, and maintained as a source of truth.

Facilitation

Write the runbook against real operator questions and actual incidents, not an idealized textbook scenario. The critical test is a cold start by someone who knows the case but doesn't have every detail memorized. Close with a clearly named source of truth and triggers that make maintenance or adjustment mandatory.

The method guide walks execution through 4 phases, timing, 4 pitfalls, and clear stop criteria.

Open method guide

Your perspective

Does this method help with your work?

Your feedback helps shape the next improvements to methodatlas.

Sources and topics

Topics
Artifact templates
Runbook: WorksheetPrepare Runbook with a clear question, roles, and sources.
markdown

runbook-checklist.md

Prepare Runbook with a clear question, roles, and sources.

Runbook: Worksheet

Question

To be confirmed

Desired outcome

To be confirmed

Scope

Plan the full method Time: Set according to scope and available evidence

Complete this worksheet on paper or in your own document during the work.

Preparation for this scope

Method setup

  • Materials: Shared workspace, accessible sources, and a decision log.
  • Roles: On-call expert · service owner · reviewer
  • Advance information: Clarify the question, timeframe, data access, roles, and known uncertainties in advance.
  • Overall time needed: Maintain as ongoing practice; retest after changes and during agreed operational exercises.
  • Setup: Create a shared version. Label facts, assumptions, and decisions separately.

Prepare for the work steps

Trigger: Define trigger and scope

  • Service, alert, trigger, and scope

Procedure: Write safe steps

  • Access, read-only checks, and expected results

Escalation: Define escalation and recovery

  • Escalation, approval, rollback, and success criterion

Maintenance: Exercise and maintain

  • Exercise outcome, owner, and review date

Trigger, diagnosis, escalation, and recovery

Trigger

Define signal, service, prerequisites, and non-applicability.

...

Diagnose

List read-only checks with expected results.

...

Action

Record authorization, escalation contact, and recovery path.

...

Verify

Record tester, exercise date, owner, and freshness.

...

Blank worksheet: start with a bounded question. Enter observed facts only, mark assumptions, and record open questions and sources.

Being On-Call · Google SRE Workbook

Trigger: Define trigger and scope

Expected artifact: Measurable trigger and procedure boundary

Measurable trigger and procedure boundary

Entry:

...

  • Is the trigger measurable?

Procedure: Write safe steps

Expected artifact: Validated safe diagnostic sequence

Validated safe diagnostic sequence

Entry:

...

  • Can each step be executed with safe context?

Escalation: Define escalation and recovery

Expected artifact: Escalation, rollback, and success criteria

Escalation, rollback, and success criteria

Entry:

...

  • Is there a clear stop point?

Maintenance: Exercise and maintain

Expected artifact: Exercised runbook with review ownership

Exercised runbook with review ownership

Entry:

...

  • Is the procedure current and tested?

Open questions and next steps

...

Method guide: https://methodatlas.meierhoff-systems.de/en/methods/runbook/run-sheet

Alternatives and neighbors

Fitting alternatives with decision guidance, followed by other related methods.

All methods
Constraints and origin
LowAsync20-60 min

Profile

Method form
Operating practice
Participants
1-4
Time
20-60 min
Maturity
Canonical
Origin
Praxisgemeinschaft
Game Day workspace showing the question, observations, and next decision.
Next up: Game Day