Post‑Incident Review (PIR) — Template
Close‑out & learning
Post‑Incident Review (PIR)
| Incident ID | Date | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Severity | SEV1/SEV2/SEV3/SEV4 | Owner | |||||||||||
| Summary | |||||||||||||
| Timeline | Detect → Triage → Contain → Eradicate → Recover → Lessons | ||||||||||||
| Root cause | |||||||||||||
| Contributing factors | |||||||||||||
| What worked / What didn’t | |||||||||||||
| Actions |
| ||||||||||||