Incident plan

Also written: incident, contain

A short plan written before anything goes wrong, with five steps: stop, assess, contain (recall or correct what went out, revoke access if needed), tell and learn. It includes knowing where each automation's off switch is.