Practical guide
Use an interruption to examine dependencies, communication and recovery rather than relying on an assumed cause.
Revised October 6, 2026. Original publication date retained. This updated operational guide replaces archived 2024 reporting.
Identify the affected journey.
Record the user-visible failure and when it began. Check the application, identity provider, DNS, connectivity and external services that the journey depends on. Provider status information is one input; it does not replace application-level evidence.
Communicate what you know.
Name the affected function, the current workaround if one exists and the next update point. Separate confirmed observations from hypotheses so users know what they can rely on.
Restore before expanding the investigation.
Follow the agreed recovery procedure and test the affected user journey after any change. Keep an incident timeline to support a later review.
Improve the runbook.
- Document the dependency that failed or remained uncertain.
- Check whether alerts reached the right person.
- Record the practical recovery and communication steps.
- Create an owned follow-up for a gap the incident exposed.