Phase 1 (Preparation) covered separately on the Preparation page — it is a program activity, not an incident-time activity. This flowchart covers phases 2–7 (Detection & Analysis through PIR / Improvement).
Decision flowchart
Click any node — or use Tab + arrow keys — to inspect the action, owner, and standards reference.
Best-practice scoring
A tabletop in a browser — set the incident profile, simulate decisions, see which gates fired.