Blog / Operations
Designing an escalation path that works at 2am with one tech on call, not just on a whiteboard
Most escalation policies are written for a team that doesn't exist at the moment they're needed. They describe tier 1, tier 2, tier 3, a security lead, a client success contact, and a management chain — a reasonable structure for a Tuesday afternoon with a full roster online. At 2am with one technician on call and a production issue actively getting worse, that structure is decoration. The real test of an escalation path is whether it still produces a correct, fast decision when exactly one person is awake and has to make it alone.
Where whiteboard escalation plans fail in practice
- They assume someone is always reachable at the next tier, with no defined behavior for what happens when that assumption is wrong at 2am specifically
- They rely on the on-call tech's judgment to correctly classify severity under stress, with no pre-agreed criteria to fall back on when judgment is compromised by fatigue or unfamiliarity
- They put the decision to wake someone else up on the same person who's already overloaded, which means the threshold for escalating quietly rises exactly when it should stay fixed
- They don't specify what \"contact\" means procedurally — text, call, page — so critical minutes go to figuring out the mechanism instead of using it
What actually holds up alone, at 2am
- A short, fixed set of objective severity criteria decided in advance — not judged fresh under pressure — so the on-call tech is matching a situation to a pre-written category, not inventing a threshold on the spot
- One unambiguous next action per severity level, not a list of options to weigh: this severity means this specific contact, by this specific channel, now
- A default to escalate when uncertain, stated explicitly as policy, so the lone tech isn't personally absorbing the risk of guessing wrong in either direction
- A record of what was tried and decided as it happens, not reconstructed afterward from memory — so the next shift, or the client conversation the next morning, is working from what actually occurred
An escalation policy that requires good judgment under pressure to function correctly isn't really a policy. It's a hope, with a flowchart attached.
This is a process design problem before it's a tooling one, and it's worth solving on paper regardless of what platform you run. Where a unified ticket-and-monitoring record helps is narrower than people expect: it means the on-call tech isn't also reconstructing context from a second tool at 2am, so whatever mental bandwidth they have left goes toward the actual decision instead of the lookup. The policy itself — the fixed criteria, the one next action, the default-to-escalate — has to exist independent of any software, because no tool decides for you what your team's real staffing at 2am can actually support.