Step 1
Collect every alert severity with its stated response expectation, the contact named for each severity and coverage window, the hours each team covers and the handoff path between them, and the acknowledgement record that proves an alert was claimed along with the timestamp the escalation clock starts from.