name: Escalation Handler
slug: escalation-handler
description: Handle escalated support issues with structured triage, communication, and resolution processes
category: customer-support
complexity: complex
version: "1.0.0"
author: "ID8Labs"
triggers:
- "escalation"
- "escalated ticket"
- "customer escalation"
- "support escalation"
- "urgent issue"
- "executive complaint"
tags:
- escalation
- support
- crisis-management
- customer-recovery
- communication

Escalation Handler

Expert escalation management system that transforms high-stakes support situations into opportunities for customer recovery and relationship strengthening. This skill provides structured workflows for triaging escalations, communicating with stakeholders, driving resolution, and preventing recurrence.

Escalations are defining moments in customer relationships. Handled poorly, they accelerate churn. Handled well, they build deeper loyalty than if the problem never happened. This skill helps you turn crisis into opportunity through systematic, empathetic, and effective escalation management.

Built on crisis management and customer recovery best practices, this skill combines triage protocols, communication frameworks, and resolution tracking to handle any escalation with confidence.

Core Workflows

Workflow 1: Escalation Triage

Quickly assess severity and route appropriately

1. Severity Classification
   | Level | Criteria | Response Time |
   |-------|----------|---------------|
   | SEV-1 | Production down, data loss, security breach | 15 minutes |
   | SEV-2 | Major feature broken, significant impact | 1 hour |
   | SEV-3 | Feature degraded, workaround exists | 4 hours |
   | SEV-4 | Minor issue, low impact | 24 hours |

2. Impact Assessment

3. Customer tier (Enterprise = higher priority)
4. Revenue at risk
5. Number of users affected
6. Business criticality to customer
7. Public exposure risk

8. Regulatory implications

9. Escalation Type

10. Technical: Product/service not working
11. Service: Support experience failure
12. Business: Commercial or relationship issue
13. Security: Data or access concerns

14. Compliance: Legal or regulatory

15. Initial Triage Questions

16. What exactly is happening?
17. When did it start?
18. Who is affected?
19. What's the business impact?
20. What has been tried?
21. Is there a workaround?

Workflow 2: Stakeholder Communication

Keep all parties informed throughout resolution

1. Internal Communication
2. Immediate: Alert relevant teams (engineering, CSM, management)
3. Ongoing: Regular status updates (hourly for SEV-1/2)
4. Resolution: Post-incident summary

5. Follow-up: Root cause and prevention

6. Customer Communication

7. Acknowledgment: Within 15 minutes of escalation
8. Update Cadence: Per severity level
9. Format: Match customer preference (email, call, portal)

10. Tone: Empathetic, ownership, action-focused

11. Update Frequency
    | Severity | Update Frequency | Stakeholders |
    |----------|------------------|--------------|
    | SEV-1 | Every 30 minutes | Customer, Exec, All hands |
    | SEV-2 | Every 2 hours | Customer, Manager, CSM |
    | SEV-3 | Daily | Customer, CSM |
    | SEV-4 | On progress | Customer |

12. Communication Principles

13. Lead with what you know, not what you don't
14. Give specific next steps and timelines
15. Acknowledge impact and frustration
16. Avoid blame or excuses
17. Provide single point of contact

Workflow 3: Resolution Management

Drive systematic resolution

1. War Room Protocol (SEV-1/2)
2. Designate incident commander
3. Assemble cross-functional team
4. Establish communication channel (Slack, Teams)
5. Set update cadence

6. Document all actions in real-time

7. Resolution Tracking
   ```
   Escalation Record:

8. ID: [Unique ID]
9. Customer: [Name]
10. Severity: [Level]
11. Start Time: [Timestamp]
12. Current Status: [Status]
13. Owner: [Name]
14. Next Action: [Action]
15. ETA: [Time]

16. Updates: [Log]
    ```

17. Resolution Steps

18. Confirm exact problem
19. Identify root cause (or best hypothesis)
20. Develop solution options
21. Implement fix (or workaround)
22. Verify resolution with customer
23. Confirm customer satisfaction

24. Document and close

25. Workaround Protocol

26. Always pursue workaround parallel to root fix
27. Communicate workaround clearly
28. Document workaround steps
29. Set expectations for permanent fix
30. Follow up when permanent fix available

Workflow 4: Customer Recovery

Rebuild relationship after resolution

1. Recovery Actions
   | Impact Level | Recovery Actions |
   |--------------|------------------|
   | Minor | Apology + thank you |
   | Moderate | Apology + service credit |
   | Significant | Exec call + credit + roadmap |
   | Severe | In-person meeting + significant gesture |

2. Recovery Conversation Structure

3. Acknowledge what happened
4. Take responsibility (no excuses)
5. Explain what you've done to fix it
6. Explain what you're doing to prevent recurrence
7. Ask what else they need

8. Commit to follow-up

9. Goodwill Gestures

10. Service credits (1-3 months typical)
11. Premium support upgrade
12. Extended contract terms
13. Free training/consulting
14. Early access to new features

15. Executive relationship investment

16. Relationship Rebuilding

17. Increased check-in frequency
18. Proactive status updates
19. Invite to customer advisory board
20. Prioritize their feedback
21. Celebrate wins together

Workflow 5: Post-Incident Review

Learn and prevent recurrence

1. Root Cause Analysis
2. What happened (factual timeline)
3. Why it happened (5 whys analysis)
4. Why we didn't prevent it
5. Why we didn't detect it earlier

6. What made resolution difficult

7. Process Review

8. Did triage work correctly?
9. Was communication effective?
10. Were the right people involved?
11. Did tools and processes help or hinder?

12. What would we do differently?

13. Prevention Actions

14. Technical fixes (monitoring, testing, architecture)
15. Process improvements (escalation path, playbooks)
16. Training needs (team skills, knowledge)
17. Documentation updates

18. Customer communication improvements

19. Documentation

20. Post-incident report
21. Knowledge base article
22. Playbook updates
23. Training materials
24. Customer-facing incident summary

Quick Reference

Best Practices

Triage

• Act fast - speed demonstrates care
• Don't underestimate severity
• Involve senior resources early
• Assign clear ownership
• Document from minute one

Communication

• Acknowledge before you diagnose
• Give timelines even if estimates
• Update even when no update
• Match customer's urgency level
• Use their preferred channel

Resolution

• Workaround first, root cause second
• Test fixes before declaring resolved
• Confirm with customer directly
• Document everything
• Don't close until customer confirms

Recovery

• Take ownership, not blame
• Gesture proportional to impact
• Follow through on commitments
• Increase touch points post-recovery
• Measure relationship health

Prevention

• Every escalation teaches something
• Share learnings across team
• Update playbooks regularly
• Celebrate prevented escalations
• Track pattern recurrence

Communication Templates

Initial Acknowledgment

Subject: [URGENT] We're on it - [Brief Issue Description]

Hi [Name],

I'm [Your Name], [Your Role], and I'm personally handling your escalation.

I understand you're experiencing [brief issue description] and I know how disruptive this is to your business.

Here's where we are:
- We've engaged our [engineering/support] team
- We're actively investigating the root cause
- I'll update you within [timeframe]

Your dedicated contact for this issue: [Name, email, phone]

We won't rest until this is resolved.

[Your Name]

Progress Update

Subject: Update on [Issue] - [Status]

Hi [Name],

Here's your [X-hour] update:

**Current Status**: [Where we are]

**What We've Done**:
- [Action 1]
- [Action 2]

**Next Steps**:
- [What we're doing now]
- [Expected outcome/timeline]

**Next Update**: [When]

Questions? Call me directly at [number].

[Your Name]

Resolution Notification

Subject: Resolved - [Issue Description]

Hi [Name],

I'm pleased to confirm that [issue] has been fully resolved.

**What Happened**: [Brief explanation]

**What We Did**: [Resolution actions]

**Preventing Recurrence**: [What we're doing so this doesn't happen again]

I know this caused significant disruption to your team, and I'm truly sorry. I'd like to discuss how we can make this right - would you have 15 minutes this week?

Thank you for your patience throughout this.

[Your Name]

Executive Apology

Subject: Personal Apology from [Executive Name]

[Name],

I'm [Executive Name], [Title] at [Company], and I wanted to reach out personally regarding the issues you've experienced.

First, I'm sorry. [Brief acknowledgment of specific impact] is not acceptable, and I take full responsibility.

I've reviewed the situation with our team, and here's what we're doing:
1. [Immediate fix]
2. [Process change]
3. [Prevention measure]

I'd welcome the opportunity to discuss this with you directly. Would you be open to a call this week?

Your success is our priority, and we're committed to earning back your trust.

Sincerely,
[Executive Name]
[Direct contact info]

Escalation Metrics

Severity Level SLAs

Red Flags

• Delayed acknowledgment: Customer waiting without response
• Under-severity: Classifying lower to avoid effort
• Communication gaps: Long silences during active escalation
• Blame language: Pointing fingers at customer or other teams
• Premature closure: Marking resolved before customer confirms
• No follow-through: Recovery promises not kept
• Missing RCA: Closing without understanding cause
• Pattern blindness: Same issues escalating repeatedly

Post-Incident Report Template

# Post-Incident Report: [Incident ID]

## Summary
- **Customer**: [Name]
- **Issue**: [Brief description]
- **Severity**: [Level]
- **Duration**: [Start to Resolution]
- **Impact**: [Customer impact description]

## Timeline
| Time | Event |
|------|-------|
| [Time] | Issue first reported |
| [Time] | Escalation triggered |
| [Time] | Root cause identified |
| [Time] | Resolution implemented |
| [Time] | Customer confirmed resolution |

## Root Cause
[Detailed explanation of why this happened]

## Resolution
[What was done to fix the issue]

## Customer Impact
- [Specific business impact]
- [Duration of impact]
- [Users/systems affected]

## Prevention Actions
| Action | Owner | Due Date | Status |
|--------|-------|----------|--------|
| [Action 1] | [Name] | [Date] | [Status] |

## Lessons Learned
- [What we learned]
- [What we'll do differently]

## Recovery Actions Taken
- [Apology delivered]
- [Goodwill gesture]
- [Follow-up scheduled]