The first thirty minutes

What is at stake

In the first thirty minutes an organisation takes three decisions that condition everything else: whether to activate, whom to convene, and what it says externally. All three are taken with incomplete information — and that is irreducible.

The activation rule

Activate wide and stand down fast. Convening a team for nothing costs an hour of management time. Activating two hours late costs control of the event, and sometimes control of the public narrative.

The activation threshold must therefore be low and automatic, and stand-down explicit and quick. A team that convenes and finds within twenty minutes that the situation is under control has not failed: it has worked.

The first situation point

It lasts ten minutes, no more, and follows six questions in this order:

1. What do we know for certain? Only verified facts, with source and time.
2. What is uncertain? Stated explicitly, so hypotheses do not circulate as facts.
3. Who is affected? People first, then clients, then systems.
4. What could still get worse? The only forward-looking question.
5. What has already been done? Actions taken before activation, often unknown to the team.
6. What decisions must be taken within the hour? Three at most.

Separating facts from hypotheses

Under stress, the most plausible hypothesis becomes a fact within three retellings. The counter is linguistic and can be practised: in the team, every statement is prefixed with its status.

• "Confirmed fact: monitoring shows 100% failure on the payment service since 14:12."
• "Hypothesis: it could come from the change deployed this morning."
• "Unverified: a colleague reports that other group entities may be affected."

That discipline feels heavy for five minutes, then becomes natural. It prevents half of all decision errors.

The role that is almost always missing

A team secretary, whose only function is to keep the incident log and call out deadlines. Without one, the record is reconstructed from memory three days later, and it is worthless — in debrief, in audit and in litigation alike.

The role must never be combined with an operational one: the person acting cannot record.