For major incidents, clear roles prevent chaos.
Incident Commander (IC):
- Coordinates response
- Makes decisions
- Delegates tasks
- Does NOT debug (that's for others)
Communications Lead:
- Updates stakeholders
- Manages customer communication
- Keeps status page current
Technical Lead(s):
- Debug and fix the issue
- Report findings to IC
Scribe:
- Documents timeline
- Records actions taken
- Helps with post-mortem
Interview tip: Mention ICS (Incident Command System) structure. It shows you've handled major incidents professionally.