Incident Response
Incident rooms with calmer timelines
Practice timelines, roles, and observability checkpoints so incident response feels coordinated instead of theatrical.
- Format
- Live workshops
- Duration
- 2 weeks, weekend intensives
- Skill
- Mixed
- Stack
- Any metrics stack
Tuition (informational): KRW 890,000
Request a syllabus conversation
Role-play incidents use realistic telemetry gaps and conflicting signals. You rotate facilitator, scribe, and investigator. Debriefs focus on which graphs actually changed decisions, not which looked impressive. We also cover how to pause data exploration when human fatigue shows up in chat tone.
What is included
- Tabletop scenarios with seeded telemetry oddities
- Templates for lightweight timelines that legal reviewers tolerate
- Checklists bridging metrics, logs, and traces under time pressure
- Communication drills for status updates without blame language
- Post-incident review structures that engineers finish
- Short module on accessibility of incident docs
- Optional evening session for managers observing quietly
Outcomes
- You facilitate a mock incident without dominating the investigation.
- You produce a timeline peers say matched their memory of the night.
- You identify one habit you will personally stop doing in war rooms.
Instructor of record
Program director who still edits incident templates for fun and clarity.
Sora Kim
Primary feedback on labs
Participant questions
Mixed levels work well because roles rotate. Juniors often shine as scribes; seniors practice stepping back.
Recent voices
“The seeded oddity where metrics lied politely matched a real outage we had last year—cathartic to rehearse safely.”