Respond to alert mail “ investigating….”Immediately receiving escalations
Evaluate impact to users; if it has no impactand not urgent, could postpone
Ownership if not the owner, involve the partnerowner into thread
Mitigation first, then find the root cause
Update investigation status in thread