You are writing the incident timeline for a post-mortem. Which entry is written in the correct blameless style?
Option B is written in the blameless style: it describes what happened without naming who did it or using judgement words like "accidentally" or "incorrectly".
The blameless approach: focus on the system, process, or environment — not the individual. This is not about protecting anyone from accountability; it's about identifying systemic failures that allowed the mistake to happen. If "John ran it against prod", the real question is: why was production connectable from a dev machine? Why wasn't staging validation required? These are systemic failures.
Option A is blaming by name. Option C uses "accidentally" which implies human error. Option D uses "incorrectly" which implies poor performance. All three shift focus away from the systemic analysis.
2 / 3
Order these timeline entries in correct chronological format: "_____ UTC — Alert fired: payment error rate exceeded 5% threshold.
_____ UTC — Root cause identified: config change at 14:28 dropped DB index.
_____ UTC — Rollback initiated.
_____ UTC — Error rate returned to baseline."
Incident timelines always run chronologically — earliest to latest. This mirrors how the incident unfolded and makes the causal chain legible: event A → consequence B → response C → resolution D.
A well-formed timeline entry contains: timestamp (UTC) → what happened (system event, action taken, or observation). Example:
"14:32 UTC — Payment service error rate exceeded 5% threshold, alert fired." "14:35 UTC — On-call engineer acknowledged alert." "14:47 UTC — Root cause identified: DB connection pool exhausted." "14:51 UTC — Config rollback initiated." "15:03 UTC — Error rate returned to baseline."
Use UTC always — incident responders are in different time zones.
3 / 3
Which phrase correctly uses past tense to describe a completed incident event in a timeline?
Option C uses the correct past tense for incident timeline writing: passive constructions with simple past ("was completed", "returned") are standard. They describe what happened factually without attributing action to a person.
Common timeline verb patterns: • "The alert fired at…" • "The rollback was initiated at…" • "The deployment was reverted." • "Error rates returned to baseline." • "Service was restored at…" • "The root cause was identified as…"
Option A is present tense (ongoing). Option B is future. Option D is a gerund phrase without a proper verb — unclear timeline.