Tabletop 01 • The quiet outage
The room is live. Make the call.
A compact security-and-operations tabletop. Three moments, no perfect information. Choose the next move and see whether your response creates clarity or chaos.
Explore↓INCIDENT ACTIVE01 / 03
08:42 — CUSTOMER REPORTS BEGIN
Users report intermittent login failures, but every dashboard is green. What do you do first?
Choose the move you would defend in the post-incident review.
Tabletop principle
The quality of the next question shapes the incident.
Dashboards summarize systems; users experience paths. When those disagree, do not vote on which one feels more trustworthy. Reconstruct the path, preserve the timeline, and put a name next to the next evidence checkpoint.
Fast response is valuable. Fast, reversible, observable response is better.