Philippines staffing blog ·
Set an Outage Update Cadence You Can Keep
During an outage, a missed update is a second incident. Use verified facts, a fixed cadence, and a correction path.
Direct answer
Operational guidance
Published October 22, 2026. Customers forgive uncertainty more easily than silence. During an outage, the support team often knows less than it wants to, and the temptation is to wait for a complete answer. That wait creates a second failure: people cannot plan, so they call again, open duplicate tickets, and lose confidence in every later update. A reliable cadence is more useful than a perfect statement.
Separate confirmed facts from working theory
Publish only what an accountable incident owner has confirmed. Label the rest as under investigation. A confirmed fact might be 'the login service is unavailable for some customers in the United States' while the cause is still unknown. Do not speculate about a vendor, a security breach, or a restoration time unless the owner has authorized that statement. If a previous update turns out to be wrong, correct it explicitly and say what changed. Quietly deleting the old message damages trust more than the original error.
Choose a cadence the team can sustain
Set the interval by the severity of the incident and the team's real capacity. Every 30 minutes may be right for a total outage and unrealistic for a partial degradation. Publish the next update time in every message, then meet it even if the update is 'no change, still investigating.' The commitment is the point. If the team cannot sustain the interval, choose a longer one before the incident starts. A missed promise is worse than a slower cadence that is consistently kept.
Write for the customer's next decision
Each update should answer three questions: what is affected, what can the customer do now, and when will they hear next. Include a workaround only if it has been tested and approved. Do not tell customers to retry repeatedly if retries make the problem worse. For accessibility, publish the update in the same channels customers already use and provide an equivalent route for people who cannot access the primary status page. A status page that is only reachable through the broken product is not a status page.
Give support a single source
Agents should not compose their own incident theories. Give them the approved update, a short internal note with what not to say, and a channel for new information. When a customer reports a new symptom, the agent records it and routes it to the incident owner rather than promising a fix. This keeps the public message consistent and turns the queue into a useful signal source. The incident owner should review the top new symptoms before the next update.
Plan the correction and the close
If a material fact changes, issue a correction with the old statement, the new statement, and the time. When service returns, say what is restored, what remains degraded, and how the team will handle work that failed during the outage. Do not close the incident at the moment the dashboard turns green if customer data or queued transactions still need repair. Keep a named owner for the residual work and a date for the follow-up review.
Review the cadence after the event
Compare the promised update times with the actual times. Count missed updates, corrections, duplicate tickets, and customer escalations. Ask agents whether they had the information they needed and whether the internal note was clear. The post-incident review should produce a small number of changes: a better template, a named backup for the status page, a tested workaround, or a clearer severity rule. A long list of generic lessons is less useful than one change that survives the next incident.
Authoritative sources
- Google Site Reliability Engineering, Managing Incidents
- CISA, Secure by Design
- W3C Web Content Accessibility Guidelines 2.2
