Post-incident FAQ (template)

Customize per event; headings stay stable for auditors.

Why did probes show green while my office could not browse?

Synthetic vantage differs from ISP paths — local traceroutes still matter.

What clock governs SLA credits?

Network availability definitions and exclusions appear in SLA body — correlate support ticket timestamps.

Where should finance ask for acknowledgement?

Ticketing receipts beat chat ephemeral logs for audit bundles; see escalation priority definitions.

Will you automatically restore backups?

Restores execute per ticket coordination; timelines follow backup expectations.

What if I need regulator-facing narrative?

Use postmortem scaffold with your lawyer redacting sensitive paths.