Skip to content

Incident response

Detect, assess, contain, communicate, and learn from coworking technology or facility incidents under named human command and safety procedures.

Primary roles: operations-manager, technical-operator, facilities, owner-operator

Stages

1. Detect and triage

Staff validate an alert or report, assess member and life-safety impact, and assign a responsible incident lead.

Manual tasks

  • Confirm the incident through an independent observation where safe
  • Set severity, incident lead, and emergency escalation based on local policy

Automation opportunities

  • Consolidate alerts and open a timestamped incident record
  • Notify the on-call person through an approved route

Suggested tools

Risks

  • Alert noise can delay recognition of a real emergency
  • Technical dashboards must not replace emergency services or physical checks

2. Contain and communicate

The incident lead approves containment, coordinates responders, and issues factual updates suited to affected members and staff.

Manual tasks

  • Approve disruptive containment or service shutdown decisions
  • Check on affected people and maintain an accessible manual fallback

Automation opportunities

  • Maintain a shared timeline and responder channel
  • Distribute human-approved status updates to defined audiences

Suggested tools

Risks

  • Premature or overbroad messages can create confusion or expose sensitive details

3. Recover and review

Responsible staff validate safe restoration, monitor recurrence, and conduct a blameless review with assigned corrective actions.

Manual tasks

  • Verify service and physical conditions before declaring recovery
  • Lead the review and assign owners and due dates to corrective actions

Automation opportunities

  • Capture timeline evidence and action-item reminders
  • Monitor agreed recovery indicators after restoration

Suggested tools

Risks

  • Restoring a system without checking member impact can leave hidden failures

Success metrics

  • Median time to assign a human incident lead
  • Median time to a verified safe recovery by severity
  • Percentage of corrective actions completed by their reviewed due dates

Last reviewed: 2026-07-18