# Incident Runbook (SAMPLE)

1. Detect
2. Contain
3. Notify within 72h SAMPLE
4. Postmortem

_Fictional SAMPLE — not legal advice._