Problem Statement
During an ongoing incident, how do you structure communication so the response stays efficient and safe?
Explanation
Keep a single incident commander. Use a dedicated channel that is logged and, if needed, out-of-band from potentially compromised systems. Define short situation reports on a fixed cadence: what is known, unknown, doing next, and blockers. Separate technical chat from executive updates to reduce noise. Avoid sharing live indicators publicly; route them to the right tools and owners. Clear comms reduces confusion, duplicate work, and accidental tip-offs.
