In-Incident Severity Re-Evaluation Prompt
Mid-incident, decide whether to upgrade or downgrade the severity as new facts arrive — so you neither under-respond to a quietly growing outage nor keep executives paged on a resolved blip.
- Target user
- Incident commanders making real-time severity calls during an active incident
- Difficulty
- Intermediate
- Tools
- Claude, ChatGPT
The prompt
You are an incident commander who knows that the initial severity is a guess and that re-grading it correctly mid-incident is one of the highest-leverage decisions you make. The wrong direction wastes responders or under-resources a disaster. Help me re-evaluate severity right now. I will provide: - Our severity rubric (what SEV1/2/3 mean here) - The current declared severity and when it was set - What's changed since: impact trend, scope, blast radius, mitigation progress, customer signal - Who's currently engaged and what's escalated Do this: 1. **Re-score against the rubric** — Apply our actual criteria to the current facts, not the facts at declaration. State the severity the rubric implies right now and where it differs from the declared level. 2. **Trajectory over snapshot** — Weigh direction, not just the current number. A SEV3 with a rising blast radius and no mitigation in sight may warrant upgrading preemptively; a SEV1 that's mitigated may warrant downgrading. Make the trend explicit. 3. **Cost of being wrong each way** — Briefly state the consequence of staying too high (responder fatigue, exec noise, crying wolf) versus too low (under-resourced, slow exec awareness, missed comms obligations). 4. **Recommendation** — Recommend upgrade, downgrade, or hold, with a one-sentence justification an exec would accept. 5. **Side effects of the change** — List what the severity change triggers: who to page or stand down, comms cadence change, status-page update, and any notification clocks that start or stop. 6. **Re-check trigger** — Define the next condition or time at which severity should be re-evaluated again. Output: the re-score, the recommendation with justification, the action side-effects list, and the next re-check trigger. Keep it short — this is a live call. Bias toward upgrading early when the trajectory is uncertain and downgrading only on confirmed, sustained mitigation.
Run this prompt with AI
Test it, get an AI-improved version, or compare models — live in the Prompt Workspace. No copy-paste.
Related prompts
-
Firing Alert Severity & Escalation Decision Prompt
Given a firing alert and current impact signals, decide an appropriate severity level and whether to escalate or page additional responders, with explicit reasoning against your severity rubric — leaving the final call to a human.
-
Is-This-Real Page Triage Prompt
Help a freshly paged on-call engineer decide in the first two minutes whether an alert is a real incident worth waking people for, a transient blip, or pure noise — before they over- or under-react.
-
Incident Severity Classification Rubric Prompt
Design a clear, defensible SEV classification rubric that on-call engineers can apply in seconds under pressure — with crisp boundaries, escalation triggers, and downgrade rules.
-
Swarm vs Escalate Decision Guide Prompt
Give the first responder a fast rule for the early-incident fork: keep working it solo, pull in a swarm of experts, or escalate to a formal incident with a commander — so pages neither languish under one overwhelmed engineer nor over-mobilize the whole org for a blip.
More Incident Response prompts & error guides
Browse every Incident Response prompt and troubleshooting guide in one place.
Reading prompts? Get all 500 in one free PDF
500 battle-tested, copy-paste AI prompts engineered by a senior systems engineer — every one with fill-in placeholders and safety/back-out notes. Drop your email and it's yours.
- 500 prompts: Linux · Kubernetes · Terraform · OpenStack · GitLab · Docker · Monitoring · Incident Response
- Instant PDF download — yours free, forever
- Plus one practical AI-workflow email a week (no spam)
Single opt-in · unsubscribe anytime · no spam.