Everything I Need to Know about Incident Response I Learned in EMT School

Due to the evolving Coronavirus/COVID-19 situation, SREcon20 Americas West has been rescheduled to June 2–4, 2020.
More information is available here.

Tuesday, March 24, 2020 - 11:50 am12:30 pm

Matt Linton, Google; Elle Armageddon, Independent


In the last decade, the tech industry has seen a rise in the use of the term "Incident Commander" for the person who is in charge of fixing a problem. The use of this term stems from companies who have begun adopting incident management terms and techniques from ICS (The Incident Command System).

ICS was originally developed by CalFire and matured over ~40 years in the emergency services community to improve the three most basic and frequent challenges in crisis management: Command, Control, and Communication.

This talk will explore the fundamentals behind ICS and why it developed the way it has, how that directly relates to system security and reliability work, and what applicable skills the tech industry can still learn from Fire and EMS professionals.

We will provide a bit of an ICS history and then some fundamental advice on incident response practices that teams can immediately put to use.

@conference {247287,
author = {Matt Linton and Elle Armageddon},
title = {Everything I Need to Know about Incident Response I Learned in {EMT} School},
year = {2020},
address = {Santa Clara, CA},
publisher = {{USENIX} Association},
month = mar,