Runbooks Incident response Define severity levels and escalation paths. Maintain a rollback plan for org and instance changes. Rollout strategy Promote config dev -> test -> prod. Separate state per environment. Certificate lifecycle Track expiry and automate renewals. Centralize PKI ownership.