Declare against explicit criteria
Use service criticality, user scope, revenue or operational impact, regulatory exposure, and expected duration to decide when normal incident handling must become major-incident coordination.
Run command, technical workstreams, stakeholder communications, decisions, recovery criteria, and post-incident actions from one visible timeline.
The major-incident room opens on command and business impact—not an ordinary ticket form. Teams can see who is leading, what is affected, when the next update is due, what decisions were made, and what must be true before the incident stands down.
Free for up to five users. No credit card required.
Adapt fields, workflows, and dashboards without code. Explore 1,000+ app templates and use cases
The first view is the major-incident command room. Use the tabs to inspect communications, service impact, recovery checks, and follow-up actions.
A critical incident needs clear authority and cadence while technical teams remain free to investigate.
Use service criticality, user scope, revenue or operational impact, regulatory exposure, and expected duration to decide when normal incident handling must become major-incident coordination.
Name an incident commander, technical lead, communications lead, service owner, and workstream owners. Avoid making the most technical responder simultaneously coordinate every decision and audience.
Record confirmed events, hypotheses, decisions, actions, results, update times, and state changes in sequence. The timeline should distinguish what was known at the time from what the review learned later.
A predictable update model reduces duplicate questions and prevents unverified explanations from becoming commitments.
Choose operational, executive, customer-facing, and regulatory audiences; record their update interval, owner, approved channel, and next due time.
State confirmed impact, current action, workaround, and next update. Keep suspected cause in the technical workstream until evidence supports a broader statement.
Capture choices such as rollback, failover, feature disablement, traffic reduction, or controlled degradation with the decision owner, time, rationale, expected result, and observed outcome.
Technical recovery, user recovery, and corrective action are connected but different milestones.
Confirm service availability, transaction success, monitoring confidence, backlog handling, data integrity where relevant, user validation, and stakeholder communication before standing down command.
Preserve the timeline and evidence, then examine conditions, signals, safeguards, coordination, and decisions without turning the review into a hunt for an individual to blame.
Give each action a risk addressed, owner, due date, completion evidence, and effectiveness check. A document alone does not reduce recurrence.
Escalate for coordination need and business consequence, not merely for a dramatic label.
| Signal | Command decision | Operational response |
|---|---|---|
| Critical multi-service or broad user impact | Declare major incident | Assign command roles and update cadence |
| Serious impact contained by a stable workaround | Keep command until risk is understood | Monitor workaround and plan controlled recovery |
| High technical severity but limited business impact | Remain standard incident unless coordination requires more | Use owned specialist response |
| Recovery achieved but confidence incomplete | Do not stand down yet | Validate monitoring, transactions, users, and backlog |
Use Jodoo to keep declaration, roles, workstreams, decisions, stakeholder updates, recovery criteria, and follow-up records visible during a major incident.
The result is a command record that remains legible during response and defensible during review.Record the incident commander, technical lead, communications owner, service owner, and each workstream without burying accountability in chat.
Change audiences, message fields, next-update times, and escalation rules to match the impact and the organization’s response practice.
Connect stand-down evidence to the post-incident review, problem, change, and corrective actions that remain open after service returns.
Keep critical-response coordination visible while specialist tools handle detection, paging, and technical collaboration.
Declaration, command roles, workstreams, decisions, stakeholder updates, recovery criteria, stand-down, review, and corrective actions.
Link the paging event, conference or chat room, observability evidence, deployment record, and status-page communication without copying every technical event.
On-call scheduling, automated paging, alert correlation, incident-room automation, and observability integrations must work out of the box.
Declare when business impact, service criticality, coordination complexity, regulatory exposure, or expected duration requires dedicated command, communication, and decision cadence beyond normal incident handling.
Use an incident commander who can coordinate priorities, roles, cadence, and decisions. The deepest technical specialist should usually lead a technical workstream rather than carry every command responsibility.
Define criteria such as stable service, successful transactions, acceptable monitoring, managed backlog, validated data, user confirmation, and completed stakeholder updates. Recovery confidence should be observable.
No. Keep alerting, paging, and technical diagnosis in specialist tools. Use Jodoo for command roles, decisions, stakeholder updates, recovery criteria, and post-incident follow-through.
Yes. Authorized builders can change command fields, workstreams, update timing, decision records, recovery checks, and dashboards without code.
Explore critical, stabilizing, recovered, and review-ready examples before adapting roles, cadence, and recovery criteria to your own services.
Explore the major incident room