Time to Contain

Runbook

A runbook is a written procedure for handling a type of incident, followed by a person. It lists the checks, the decisions and the actions in order. A runbook turns into automation when each step is coded, and into agent guidance when the steps are written as intent.

Definition

Good runbooks name the approver for each action, the rollback for each action and the point at which to escalate. Those three lines are what a response platform needs to enforce.

Teams often have runbooks that nobody has read since the last incident. Reading them before a pilot shows which steps are safe to automate first.

Runbook in Torq's documentation

Torq's knowledge base publishes a workflow template that clears Okta sessions for specific users through a Slack request, a runbook step written as an automated workflow. vendor claim kb.torq.io, read

The example names a vendor and its own page. A vendor's use of Runbook may differ from the definition above; the rubric uses the definition on this page.