Email: [email protected]
Keep incident facts separate from assumptions using a concise evidence log with times, sources, actions, owners and unresolved questions.