# Knowledge Management and Runbook Maintenance One-sentence definition: Maintain accurate, accessible procedures and lessons to enable consistent operations. ## Key Facts - Centralize playbooks/runbooks with versioning and owner; review schedule. - Link cases to KB articles; include screenshots/commands; keep “last updated.” - Sunset outdated docs; use templates; track usage metrics. - **Verify:** check official (ISC)² CBK and current exam outline. ## Exam Relevance - Choose managed KB to reduce errors and onboarding time. **Mnemonic:** “**Write**, **review**, **reuse**.” ## Mini Scenario Q: New analyst follows old VPN guide—outage—prevention? A: Archive outdated doc; add validity badges and review cadence. ## Revision Checklist - Two KM practices. - Ownership signal. - Review cadence. ## Related [[Playbooks and SOAR Automation]] · [[IR Communications and Stakeholder Notifications]] · [[Operational Metrics and KPIs (MTTD MTTR Coverage)]] · [[Lessons Learned and Continuous Improvement Loop]] · [[Domain 7 - Index]]