Incident Management
Practical
By Samson Tanimawo, PhD
Published Dec 4, 2025
4 min read
Incident Tool Rights and Read-Only Mode
Some incident tool changes shouldn't happen during incidents. The rights model.
Live workflow · 3 working · 1 queuedLive
Signal · gather Working
Decide · pick action Working
Apply · with verify Working
Learn · update playbook Queued
Freeze
During active sev 1: configuration changes to incident tools blocked.
Prevents accidental misconfig during stress.
Emergency
Specific override: documented; logged.
Used only when fix-during-incident is required.
Post-incident
Review what changed during the incident.
Catches drift early.