Reconstructs an incident without assigning blame and translates causes into concrete improvement actions.
Core question: Which conditions enabled the incident, and how do we reduce recurrence or impact?
Operating practiceMethod form: Operating practice. Describes how this method is used in practice.MediumComplexity: medium. Estimates preparation, facilitation effort, and method confidence needed.Workshop + asyncFormat: workshop or async. Shows whether the method works in a workshop, asynchronously, or both.
30-90 min
3-12
Details
DevOpsCategory: DevOps. Describes the method's domain of use.
Arranges events, decisions, and delays chronologically and makes causes and lessons learned visible.
Core question: Which evidenced event sequence explains detection, response, and impact without projecting later knowledge into earlier decisions?
Mapping toolMethod form: Mapping tool. Describes how this method is used in practice.MediumComplexity: medium. Estimates preparation, facilitation effort, and method confidence needed.Workshop + asyncFormat: workshop or async. Shows whether the method works in a workshop, asynchronously, or both.