# Enterprise Data Platform Incident RCA Template

## 1. Incident Summary
- Incident ID:
- Date/time detected:
- Detected by:
- System/data product affected:
- Severity:
- Current status:

## 2. Business Impact
- Users or teams affected:
- Data products/reports affected:
- SLA/SLO impact:
- Regulatory or audit exposure:

## 3. Timeline
| Time | Event | Owner | Evidence |
|---|---|---|---|
| | Detection | | |
| | Triage | | |
| | Containment | | |
| | Resolution | | |
| | Prevention action created | | |

## 4. Root Cause
- Technical root cause:
- Process/control root cause:
- Ownership gap:
- Metadata, contract, lineage, or quality-rule gap:

## 5. Corrective Actions
| Action | Owner | Due date | Status |
|---|---|---|---|
| | | | |

## 6. Preventive Controls
- New validation rule:
- New alert/SLO:
- New contract/schema control:
- Stewardship or governance action:

## 7. Evidence Pack
- Logs:
- Screenshots:
- Query/output:
- Ticket links:
- Approval/sign-off: