Start with the operating picture
Capture the incident identifier, severity, affected capability, business impact, command roles, current phase, and next communication deadline.
Separate evidence from action
A timeline records what happened and when. An action tracker records what must happen next, who owns it, and when it is due.
Generate communications from current records
A stakeholder update should draw from the current impact statement, recent developments, open actions, command assignments, and next-update commitment.
Preserve the record
Export the workspace at meaningful milestones and after resolution. The record supports handoff, review, and improvement but does not replace the official system of record.
Apply the method
The related Greywake application exposes the inputs, assumptions, and output structure described in this article.