Incident runbook template (Markdown + JSON)

Every breach we’ve been called in to investigate had one thing in common: the conditions that made it possible were set in a design document, often years before the incident.