Your CTO has asked you to implement a postmortem policy on every incident for internal use. You want to define what a good postmortem is to ensure that the policy is successful at your company. What should you do? (Choose two.)
Select an option, then click Submit answer.
Reference / correct answer:
Ensure that all postmortems include the severity of the incident, how to prevent a future occurrence of the incident, and what caused the incident without naming internal system components.
Most accepted answer: C. Ensure that all postmortems include the severity of the incident, how to prevent a future occurrence of the incident, and what caused the incident without naming internal system components.
Community votes: B=1, C=6, D=1, E=6
I think the answers are B & D. upvoted 8 times Feliphus 2 years, 7 months ago Me too E -> include all incident participants in postmortem authoring, no much sense, the incident commander is the author of the postmortem A -> identify the person or team responsible for causing the incident C -> without naming internal system components, the postmortem has to be focus on the processes/components upvoted 1 times winston9 2 years, 1 month ago Not D, I don't think it's always possible to detail how the incident was resolved, may be too complicated. B and C for me. upvoted 1 times ... ...
Me too E -> include all incident participants in postmortem authoring, no much sense, the incident commander is the author of the postmortem A -> identify the person or team responsible for causing the incident C -> without naming internal system components, the postmortem has to be focus on the processes/components upvoted 1 times winston9 2 years, 1 month ago Not D, I don't think it's always possible to detail how the incident was resolved, may be too complicated. B and C for me. upvoted 1 times ...
Not D, I don't think it's always possible to detail how the incident was resolved, may be too complicated. B and C for me. upvoted 1 times
Selected Answer: CE Option B is incorrect because it states that the postmortem should include how the incident could have been worse.The focus of the postmortem should be on identifying the root cause of the incident and developing recommendations for preventing future occurrences. upvoted 7 times
C, E - Don't share internal info and share as wide as possible. Post Mortems and RCAs typically are shared with customers. upvoted 1 times