Files
nexus/sreweekly/articles/232/01-incident-updates-interruptions-and-the-30-minute-window.html
2026-09-12 17:23:01 +08:00

210 lines
7.5 KiB
HTML

<!DOCTYPE HTML>
<html lang="en-us">
<head>
<meta charset="utf-8">
<title>Incident updates, interruptions and the 30 minute window - UnixDaemon: In search of (a) life</title>
<meta name="author" content="map[name:Dean Wilson]">
<meta name="description" content="">
<meta name="HandheldFriendly" content="True">
<meta name="MobileOptimized" content="320">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link href='/index.xml' rel="alternate" title="UnixDaemon: In search of (a) life" type="application/atom+xml">
<link rel="canonical" href="https://www.unixdaemon.net/sysadmin/incident-updates-and-interruptions/">
<link href="https://www.unixdaemon.net/favicon.png" rel="shortcut icon">
<link href="https://www.unixdaemon.net/css/screen.css" media="screen, projection" rel="stylesheet" type="text/css">
<link href="https://www.unixdaemon.net/css/font-awesome.min.css" media="screen" rel="stylesheet" type="text/css">
<link href='https://fonts.googleapis.com/css?family=Nunito:400,300,700' rel='stylesheet' type='text/css'>
<meta name="google-site-verification" content="xyisveClGOK3aUjA5QIPkeGjVV_TfExAxXhIh5yt5nU" />
<script type="text/javascript">
var _gaq = _gaq || [];
_gaq.push(['_setAccount', 'UA-46204499-1']);
_gaq.push(['_trackPageview']);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
</script>
</head>
<body>
<div class="container">
<div class="left-col">
<div class="intrude-less">
<header id="header" class="inner"><div class="profilepic">
</div>
<nav id="main-nav"><ul class="main">
<li><a href="https://www.unixdaemon.net/">Home</a></li>
<li><a href="https://www.unixdaemon.net/about/">About</a></li>
</ul>
</nav>
<nav id="sub-nav">
<div class="social">
<a class="twitter" href='https://twitter.com/unixdaemon' title="Twitter">Twitter</a>
<a class="github" href='https://github.com/deanwilson' title="GitHub">GitHub</a>
<a class="linkedin" href='https://www.linkedin.com/in/deanswilson' title="LinkedIn">LinkedIn</a>
<a class="rss" href='/index.xml' title="RSS">RSS</a>
</div>
<nav id="main-nav"><ul class="main">
<li><a href="https://www.unixdaemon.net/ansible/">/ansible/</a>
<a href="https://www.unixdaemon.net/books/">/books/</a></li>
<li><a href="https://www.unixdaemon.net/career/">/career/</a>
<a href="https://www.unixdaemon.net/cloud/">/cloud/</a></li>
<li><a href="https://www.unixdaemon.net/commandline/">/commandline/</a>
<a href="https://www.unixdaemon.net/events/">/events/</a></li>
<li><a href="https://www.unixdaemon.net/firefox/">/firefox/</a>
<a href="https://www.unixdaemon.net/geekstuff/">/geekstuff/</a></li>
<li><a href="https://www.unixdaemon.net/gui/">/gui/</a>
<a href="https://www.unixdaemon.net/linux/">/linux/</a></li>
<li><a href="https://www.unixdaemon.net/meta/">/meta/</a>
<a href="https://www.unixdaemon.net/misctech/">/misctech/</a></li>
<li><a href="https://www.unixdaemon.net/movies/">/movies/</a>
<a href="https://www.unixdaemon.net/network/">/network/</a></li>
<li><a href="https://www.unixdaemon.net/nottech/">/nottech/</a>
<a href="https://www.unixdaemon.net/online/">/online/</a></li>
<li><a href="https://www.unixdaemon.net/perl/">/perl/</a>
<a href="https://www.unixdaemon.net/programming/">/programming/</a></li>
<li><a href="https://www.unixdaemon.net/puppet/">/puppet/</a>
<a href="https://www.unixdaemon.net/security/">/security/</a></li>
<li><a href="https://www.unixdaemon.net/sites/">/sites/</a>
<a href="https://www.unixdaemon.net/sysadmin/">/sysadmin/</a></li>
<li><a href="https://www.unixdaemon.net/tools/">/tools/</a>
<a href="https://www.unixdaemon.net/unixdaemon/">/unixdaemon/</a></li>
</ul>
</nav>
</nav>
</header>
</div>
</div>
<div class="mid-col">
<div class="mid-col-container">
<div id="content" class="inner">
<div itemscope itemtype="http://schema.org/Blog">
<article class="post" itemscope itemtype="http://schema.org/BlogPosting">
<h1 class="title" itemprop="name">Incident updates, interruptions and the 30 minute window</h1>
<div class="date"><time datetime='Wed, Jun 24, 2020' data-updated="true" itemprop="datePublished">Wed, Jun 24, 2020</time>
</div>
<div class="tags">
<a href="https://www.unixdaemon.net/categories/sysadmin"> sysadmin </a>
</div>
<div class="entry-content" itemprop="articleBody"><p>For most companies Incident Commander or Incident Manager is not a
specific job, it&rsquo;s a role you may take on when something has gone, often
horribly, wrong and you need to quickly unite an adhoc group into a team
to resolve it. The incident commander should be the point of contact,
and source of truth, about your incident and to do that successfully
they&rsquo;ll need to be updated and kept informed about what&rsquo;s happening.
Depending on how experienced they are in the role this can be a very
light touch experience or it can feel like being constantly nagged to
put the washing away while someone burns money nearby.</p>
<p>I&rsquo;ve been involved in a fair few incidents over the years and one of the
best approaches I&rsquo;ve seen to handling updates and interruptions was from
someone who had an amazing internal clock; or a watch we never noticed.
When handling an incident he&rsquo;d essentially give himself a 30 minute,
reset-able, window of time. Once he&rsquo;d been given the initial
introduction to the incident he&rsquo;d step back, handle the communication
and anything else the incident responders has asked for and wait for
about 30 minutes.</p>
<p>If no one gave him any new information or status updates he&rsquo;d consider
it an invitation to interrupt and ask what was going on. Once he&rsquo;d been
updated he&rsquo;d move back and let the team run with the problem. If someone
gave him an update before the 30ish minutes were up he&rsquo;d reset his
timer, leave you alone and try to get whatever you&rsquo;d asked for. I don&rsquo;t
know if it was just a well chosen period based on experience or the
limit of his patience but 30 minutes was often enough to stop people
rabbit holing while the fires were raging.</p>
<p>Once I&rsquo;d left the team he often managed incidents for and became one of
his internal customers I began to notice that everyone in his area
developed the subconscious habit of delivering their status updates
every 25 minutes or so, even when he wasn&rsquo;t the incident manager for
a specific incident. I never discovered if this was all a deliberate
attempt to set the culture he wanted or he was just being himself but as
someone handling an incident I always appreciated the time and
predictability of his involement. Thanks to LinkedIn and Twitter I could
probably track him down and ask but I&rsquo;ve always liked the idea it was
just him being himself.</p>
</div>
</article>
<div class="share">
<div class="addthis_toolbox addthis_default_style ">
</div>
</div>
</div>
</div>
</div>
<footer id="footer" class="inner">Copyright &copy; 2025
Dean Wilson
Design credit: <a href="http://shashankmehta.in/archive/2012/greyshade.html">Shashank Mehta</a>
</footer>
</div>
</div>
</body>
</html>