Normal Monitoring

No active threats. Standard operations.

Phase 02 · Active Storm

During the storm: operational discipline beats heroics.

When events are unfolding, the goal is not improvisation — it is execution of the plan you already built. Maintain communication, protect people, and hold the line on operational discipline.

Cadence

90 min comms

Priority

Safety → Comms → Systems

Posture

Document everything

01

People first, always

Before any system check, account for every team member and their household. A safe team can recover anything. An unsafe team is the only true emergency.

  • Roll-call every shift change; mark each person as Safe / Affected / Unreachable
  • Suspend non-essential work for staff in the impact zone
  • Activate employee assistance and check-in channels
02

Hold the communication cadence

In a crisis, silence is read as failure. A short, accurate update every 90 minutes — even if the message is 'no change' — keeps clients calm and the team aligned.

  • Open a 24/7 incident bridge with a documented rotation
  • Push client status updates on a fixed cadence, not on demand
  • Log every decision, timestamped, in the incident channel
03

Protect systems with the plan you wrote

This is not the time to design new architecture. Execute the runbooks. Trust the rehearsed failover. Document deviations for the after-action review.

  • Execute pre-defined failover for at-risk regions
  • Monitor for anomalies — outages are when attackers strike
  • Snapshot immutable backups before landfall hits primary region
  • Hold change freeze on non-essential deployments