There's a school of thought that tries to bring incidents under control by using response protocols and runbooks.

I'm not sure if it's very effective? It's good to have a standard for who responds to the incident and how they communicate and coördinate, but when it comes to solving the problem at hand, you've got to :toot: improvise :toot: