The Incident Tooling Budget

Incident tools cost money. The budget framework that aligns spend with severity.

Where to invest

Detection (alerts) and response (paging) get the largest budget.

Postmortem tools get smaller budget; mostly overlap with comms tools.

Ratio

Tooling spend should be 5-15% of incident-related cost.

More than that is over-tooling; less is under-investing.

Review

Annual tool audit. Which tools used; which dormant.

Retire dormant tools.