Skip to main content

Post-Incident Review Prep

Gather context for a blameless post-incident review. The review itself is a team decision.

The prompt
For the incident on [date/system], gather from emails and Teams a factual timeline:
- When it was detected and by whom
- Actions taken and at what time
- Communications sent
- When service was restored

Keep it factual and blameless — no fault attribution. This is preparation for the team's post-incident review, not the review's conclusions.

How to use it

  1. 1Select Copy the prompt above.
  2. 2Paste it into Microsoft 365 Copilot.
  3. 3Replace anything in brackets with your own detail, then send it.

Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.

Written for

IT Manager, SRE, DevOps Engineer