<metaname="description"content="A collection of information about the Spearhead Systems incident response process. Not only how to prepare new employees for on-call responsibilities, but also how to handle major incidents, both in preparation and after-work.">
<metaproperty="og:title"content="Spearhead Systems Incident Response Documentation"/>
<metaproperty="og:site_name"content="Spearhead Systems Incident Response Documentation"/>
<metaproperty="og:description"content="A collection of information about the Spearhead Systems incident response process. Not only how to prepare new employees for on-call responsibilities, but also how to handle major incidents, both in preparation and after-work."/>
<metaname="twitter:title"content="Spearhead Systems Incident Response Documentation"/>
<metaname="twitter:description"content="A collection of information about the Spearhead Systems incident response process. Not only how to prepare new employees for on-call responsibilities, but also how to handle major incidents, both in preparation and after-work."/>
<h1>Spearhead Systems Incident Response Documentation</h1>
<p>This documentation covers parts of the Spearhead Systems Issue Response process. It is a copy of <ahref="https://github.com/PagerDuty/incident-response-docs/">PagerDuty's</a> documentation and furthermore a cut-down version of our own internal documentation, used at Spearhead Systems for any issue (incident or service request), and to prepare new employees for on-call responsibilities. It provides information not only on preparing for an incident, but also what to do during and after. It is intended to be used by on-call practitioners and those involved in an operational incident response process (or those wishing to enact a formal incident response process). See the <ahref="about/">about page</a> for more information on what this documentation is and why it exists. This documentation is complementary to what is available in our <ahref="https://sphsys.sharepoint.com">existing wiki</a> and may not yet be open sourced.</p>
<divclass="admonition note">
<pclass="admonition-title">Issue, Incident and Service Request</p>
<p>At Spearhead we use the term <em>issue</em> to define any request from our customers. Issues fall into two categories: "Service Requests (SR)" and "Incidents (IN)". Note that we use the term Incident to describe both a service request as well as incidents. For brevity we will use SR and IN throughout this documentation.</p>
</div>
<p>A "service request" is usually initiated by a human and is generally not critical for the normal functioning of the business while an "incident" is an issue that is or can cause interruption to normal business functions. </p>
<p><imgalt="Issue Response at Spearhead Systems"src="./assets/img/headers/sph_ir.jpg"/></p>
<p>If you've never been on-call before, you might be wondering what it's all about. These pages describe what the expectations of being on-call are, along with some resources to help you.</p>
<ul>
<li><ahref="oncall/being_oncall/">Being On-Call</a> - <em>A guide to being on-call, both what your responsibilities are, and what they are not.</em></li>
<li><ahref="oncall/alerting_principles/">Alerting Principles</a> - <em>The principles we use to determine what things page an engineer, and what time of day they page.</em></li>
</ul>
<h2id="before-an-incident">Before an Incident<aclass="headerlink"href="#before-an-incident"title="Permanent link">#</a></h2>
<p>Reading material for things you probably want to know before an incident occurs. You likely don't want to be reading these during an actual incident.</p>
<ul>
<li><ahref="before/severity_levels/">Severity Levels</a> - <em>Information on our severity level classification. What constitutes a Low issue? What's a "Major Incident"?, etc.</em></li>
<li><ahref="before/different_roles/">Different Roles for Incidents</a> - <em>Information on the roles during an incident; Incident Commander, Scribe, etc.</em></li>
<li><ahref="before/call_etiquette/">Incident Call Etiquette</a> - <em>Our etiquette guidelines for incident calls, before you find yourself in one.</em></li>
</ul>
<h2id="during-an-incident">During an Incident<aclass="headerlink"href="#during-an-incident"title="Permanent link">#</a></h2>
<p>Information and processes during an incident.</p>
<ul>
<li><ahref="during/during_an_incident/">During an Incident</a> - <em>Information on what to do during an incident, and how to constructively contribute.</em></li>
<li><ahref="during/security_incident_response/">Security Incident Response</a> - <em>Security incidents are handled differently to normal operational incidents.</em></li>
</ul>
<h2id="after-an-incident">After an Incident<aclass="headerlink"href="#after-an-incident"title="Permanent link">#</a></h2>
<p>Our followup processes, how we make sure we don't repeat mistakes and are always improving.</p>
<ul>
<li><ahref="after/post_mortem_process/">Post-Mortem Process</a> - <em>Information on our post-mortem process; what's involved and how to write or run a post-mortem.</em></li>
<li><ahref="after/post_mortem_template/">Post-Mortem Template</a> - <em>The template we use for writing our post-mortems for major incidents.</em></li>
<p>So, you want to learn about incident response? You've come to the right place.</p>
<ul>
<li><ahref="training/overview/">Training Overview</a> - <em>An overview of our training guides and additional training material from third-parties.</em></li>
<li><ahref="training/incident_commander/">Incident Commander Training</a> - <em>A guide to becoming our next Incident Commander.</em></li>
<li><ahref="training/deputy/">Deputy Training</a> - <em>How to be a deputy and back up the Incident Commander.</em></li>
<li><ahref="training/scribe/">Scribe Training</a> - <em>A guide to scribing.</em></li>
<li><ahref="training/subject_matter_expert/">Subject Matter Expert Training</a> - <em>A guide on responsibilities and behavior for all participants in a major incident.</em></li>
<li><ahref="training/glossary/">Glossary of Incident Response Terms</a> - <em>A collection of terms that you may hear being used, along with their definition.</em></li>
