{% extends "base.html" %} {% block title %}Runbooks — Observability Canvas — ICDEV{% endblock %} {% block content %} ← Observability Canvas

📖 Runbooks

Operational incident runbooks — alert triage, pipeline recovery, SIEM gap remediation — NIST IR-4 / SI-4 / AU-6
{% if runbooks %} {% for rb in runbooks %}
{% if rb.execution_count %}
▶ {{ rb.execution_count }}x run
{% endif %}
{{ rb.title }}
{{ rb.category }} {{ rb.severity }}
{% if rb.trigger_condition %}
Trigger:{{ rb.trigger_condition }}
{% endif %}
{{ rb.description }}
{% if rb.nist_controls %}
NIST: {{ rb.nist_controls|join(', ') }}
{% endif %}
{% if rb.owner %}👤 {{ rb.owner }}{% endif %} {% if rb.estimated_duration_min %}⏱ ~{{ rb.estimated_duration_min }} min{% endif %} {% if rb.steps %}{{ rb.steps|length }} steps{% endif %} {% if rb.last_executed_at %}Last run: {{ rb.last_executed_at[:10] }}{% endif %}
{% if rb.tags %}
{% for tag in rb.tags %}{{ tag }}{% endfor %}
{% endif %}
{% endfor %} {% else %}

No runbooks yet

Create operational runbooks for common observability incidents like alert storms, pipeline failures, and SIEM gaps.

{% endif %}
{% endblock %}