This should contain:
- A breakdown of what happened with a timeline
- What happened
- When it was noticed
- Actions taken
- When it was resolved
Action items coming out of an incident need to be realistic. Make sure that you avoid including:
- Irrelevant detail
- Speculation
- Blaming (blaming others incentivizes cover ups rather than a growth and learning culture)