> For the complete documentation index, see [llms.txt](https://duck-initiative.gitbook.io/d.u.c.k.-knowledge-base/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://duck-initiative.gitbook.io/d.u.c.k.-knowledge-base/communications-toolkit/templates-and-toolkits/post-mortem-analysis.md).

# Post-Mortem Analysis

General information to be collected as part of an extensive post-mortem analysis

The details below are general guidelines for documentation of an incident. The decisions around distribution and communication of the specific details need to be taken on a case-by-case analysis.

General information structure:

### Incident Summary

| <p> </p><p>Date:</p><p> </p>          | <p> </p><p>Date of incident.</p><p> </p>                                  |
| ------------------------------------- | ------------------------------------------------------------------------- |
| <p> </p><p>Time:</p><p> </p>          | <p> </p><p>Time of incident.</p><p> </p>                                  |
| <p> </p><p>Duration:</p><p> </p>      | <p> </p><p>Duration of incident.</p><p> </p>                              |
| <p> </p><p>Event Summary:</p><p> </p> | <p> </p><p>Brief event description, timeline, and resolution.</p><p> </p> |

### Incident Description

| <p> </p><p>Initial Detection:</p><p> </p>        | <p> </p><p>How and when was the incident first detected?</p><p> </p> |
| ------------------------------------------------ | -------------------------------------------------------------------- |
| <p> </p><p>Affected Services:</p><p> </p>        | <p> </p><p>List the services that were impacted.</p><p> </p>         |
| <p> </p><p>Stakeholder Notification:</p><p> </p> | <p> </p><p>Who was notified and when?</p><p> </p>                    |

### Root Cause Analysis

| <p> </p><p>Preliminary Analysis:</p><p> </p> | <p> </p><p>Initial findings on what caused the incident.</p><p> </p> |
| -------------------------------------------- | -------------------------------------------------------------------- |
| <p> </p><p>Detailed Analysis:</p><p> </p>    | <p> </p><p>In-depth investigation into the root cause.</p><p> </p>   |

### Impact Assessment

| <p> </p><p>Direct Impact:</p><p> </p>                | <p> </p><p>Describe the immediate impact of the incident.</p><p> </p>                            |
| ---------------------------------------------------- | ------------------------------------------------------------------------------------------------ |
| <p> </p><p>Indirect/Secondary Impact:</p><p> </p>    | <p> </p><p>Outline any additional impacts (e.g., reputation damage, financial loss).</p><p> </p> |
| <p> </p><p>Cost of Incident:</p><p> </p>             | <p> </p><p>Include direct and indirect costs.</p><p> </p>                                        |
| <p> </p><p>Compensation and Remediation:</p><p> </p> | <p> </p><p>Detail any compensation provided to affected parties.</p><p> </p>                     |

### Impact Timeline

| <p> </p><p>Chronological Events:</p><p> </p> | <p> </p><p>List key events and their times throughout the incident.</p><p> </p> |
| -------------------------------------------- | ------------------------------------------------------------------------------- |

### Resolution & Mitigation

| <p> </p><p>Immediate Actions Taken:</p><p> </p> | <p> </p><p>Describe the actions taken to resolve the incident.</p><p> </p>   |
| ----------------------------------------------- | ---------------------------------------------------------------------------- |
| <p> </p><p>Long-Term Measures:</p><p> </p>      | <p> </p><p>Outline any long-term measures to prevent recurrence.</p><p> </p> |

### Lessons Learned

| <p> </p><p>Key Takeaways:</p><p> </p>          | <p> </p><p>Summarize the main lessons learned from the incident.</p><p> </p> |
| ---------------------------------------------- | ---------------------------------------------------------------------------- |
| <p> </p><p>Improvements Suggested:</p><p> </p> | <p> </p><p>Recommend improvements to prevent future incidents.</p><p> </p>   |

### Action Items

| <p> </p><p>Short-term Actions:</p><p> </p> | <p> </p><p>List immediate steps to be taken.</p><p> </p>             |
| ------------------------------------------ | -------------------------------------------------------------------- |
| <p> </p><p>Long-term Actions:</p><p> </p>  | <p> </p><p>Outline strategic changes or upgrades needed.</p><p> </p> |

### Appendices

| <p> </p><p>Additional Documentations</p><p> </p> | <p>·       Full Incident Report</p><p>·       Details of Affected Services or Validators</p><p>·       Links to relevant logs, charts, etc.</p> |
| ------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------- |
