Disaster Preparedness - The Practice of Cloud System Administration - page 326

• What is the procedure if someone becomes unavailable?
In IT operations, we add a fifth question:
• What is the procedure if additional failures are detected?
Create a template that the IC can use to produce this document. Make the template access-
ible in a standard location so that everyone knows where to find it. An example can be
found in Figure 15.2 .
Figure 15.2: A sample Incident Action Plan (IAP)
15.5.4 Best Practices
To assure success, everyone should get practice using ICS procedures and being the Incid-
entCommander,newhiresshouldbeintroducedtoICSproceduresaspartoftheironboard-
ing process, and escalation partners should be informed that ICS procedures are in use.
Teams should use ICS procedures for minor incidents to stay in practice so that every-
one is comfortable with the process when major situations develop. ICS procedures should
be used for non-emergencies such as datacenter moves and major upgrades as well as for
security incidents and adversarial terminations.