One card per person. Print or paste into the meeting invite. "Everyone else plays themselves."
Decides. Doesn't type, doesn't investigate — decides. Every escalation lands here; every decision gets a timestamp (the Scribe's job to catch it).
Clients and press hear ONE voice — this one. Owns the "what we say / what we don't" card. Nothing goes out unapproved, including "helpful" replies from anyone else.
Contain → eradicate → restore, in that order. Reports state changes to the Incident Lead in plain language ("3 hosts isolated, backups verifying"), not tool output.
Timestamps EVERYTHING: alerts, decisions, calls, state changes. The timeline is the deliverable — it's the first thing the insurer asks for and the backbone of the after-action.
Knows where the policy number lives (the document, not the concept). Holds counsel's after-hours contact. Owns the notice-window clock once counsel sets it.