Monitoring phase
The monitoring stage occurs when a remediation has taken place, but an incident has not yet been verified to be resolved. During the monitoring stage, incident responders will validate and confirm the fix was successful.
Elements to include in an update during the Monitoring phase are:
- Update on the remediation taken and expected outcome
- Time the remediation was implemented
- How to identify the issue (so stakeholders can recognize if the problem still occurs)
- What to do if you notice the issue still occuring
- What to do if customers contact you asking for more details
- Workarounds, if known
- Observed customer impact update (whatever is known right now)
- Time the incident started
- Description of the issue detected
- Where to find more information
- When to expect another update
An example of a status update during the Monitoring phase is:
“As of 8:55PM PDT, we believe the Rift was sealed by the interdimensional laser machine. The Containment Field should now be restored. Customers should no longer be at risk of abduction. We are currently monitoring the situation. We have not received reports of any additional customer abductions, however if your customers are still seeing Demogorgons in their waking dreams, please join the #hawkins-incident channel to report the issue immediately. Expect another update within 30 minutes.”