Your question is Run a High-Impact Incident Review. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
You are the engineering manager for a payments platform after a Sev-1 incident that caused intermittent authorization failures and delayed statement updates across web and mobile channels for 47 minutes. The incident is already resolved, but leadership is frustrated because the last two post-incident reviews produced action items that were never completed, and the same classes of failures keep resurfacing. You need to run a review that drives real learning without turning into blame, while balancing pressure from senior leaders who want a fast answer, compliance partners who need a documented record, and engineers who are already overloaded by a major quarter-end delivery. Two root-cause areas are still ambiguous because logs are incomplete, and one contributing team is defensive because they believe their service was unfairly blamed during the live response.
| Detail | Value |
|---|---|
| Incident severity | Sev-1 |
| Customer impact | 3.2% of authorization attempts failed; 18K statement updates delayed |
| Incident duration | 47 minutes |
| Teams involved | 4 engineering teams + SRE + customer servicing |
| Review deadline | Draft within 3 business days; final within 7 |
| Open delivery commitments | Quarter-end release in 4 weeks |
| Compliance requirement | Formal documented review and remediation tracking |
| Known data gaps | Incomplete logs for 11 minutes of the incident |
How would you plan and run the post-incident review so the organization actually learns from it and the follow-up actions get executed? How would you handle ambiguity, defensiveness, and competing delivery pressure while still producing a credible remediation plan?