Incident Commander
ELI5 - The Vibe Check
The incident commander is the one person during an outage whose entire job is to run the response, not to actually fix the bug. They decide who investigates what, when to escalate, and when to tell customers, while the engineers heads-down debugging don't also have to coordinate fifteen people in a chat room. Someone has to fly the plane while everyone else fixes the engine.
Real Talk
The incident commander is the designated single point of coordination during an active incident, responsible for driving the response, delegating investigation tasks, managing communication, and declaring resolution, while remaining separate from the hands-on technical troubleshooting. The role exists to prevent chaos and duplicated effort when many people respond to the same incident at once.
When You'll Hear This
"Paging the incident commander now, this one's sev-1." / "The incident commander kept the status page updated every 15 minutes while the team dug into the root cause."
Related Terms
Incident Response
Incident Response is the process your team follows when production breaks. Who gets paged? Who's the incident commander?
On-Call Rotation
On-Call Rotation is a schedule where team members take turns being the person who gets woken up when production breaks.
Postmortem
A Postmortem is the meeting you have after an incident to figure out what went wrong and how to prevent it from happening again.
Runbook
A Runbook is a step-by-step guide for handling a specific operational task or incident.
War Room
A war room is the emergency meeting you hope you never need — when production is down, customers are screaming, and the whole team gathers (physically or v...