coordination

Turns incident work, roles, and countermeasures into a tangible result by declaring an incident, assigning commander and roles, and closing and reviewing the incident.

Core question: Who is in each role, which effect should be checked next, and when is the next stakeholder update due?

As needed

4-15