Services

Resources

Company

Blameless postmortem

A blameless postmortem is a written review of an incident that explains what happened, why, and what will change, without blaming individuals. It assumes people acted reasonably with the information they had. The focus is on the system, tools and process that let the failure happen. It is also called a post-incident review.

How it works

After incident management restores service, the team writes a document that covers:

  • Impact: for example, 18% of checkout requests failed for 47 minutes.

  • Timeline: detection, key decisions and recovery, with timestamps.

  • Contributing factors: why the system allowed the failure, such as a config change with no validation.

  • Action items: each with an owner and a due date, like "add a schema check to the deploy pipeline".

The team reviews the draft together and tracks action items to completion.

Why it matters in production

If people fear blame, they hide details, and the real causes stay in the system. Blameless reviews get honest timelines, which produce fixes that stick. "Be more careful" is not an action item; a guardrail is.

See also

On the One2N blog

Further reading

Four-panel comic about Blameless postmortem: After an outage, someone asks "who pushed the bad config?" and people go quiet; A blameless postmortem asks how the system allowed it, not who did it; Impact: 18% of checkouts failed for 47 min; cause: config with no validation; Action items with...