Opens in a new tab
Guide

An on-call rotation needs more than an evenly filled calendar

In brief

Follow a page through backup, specialist help, access and recovery to see what the whole on-call team can actually cover.

4 min read

Is this the right starting point?
Before you read
Familiarity with your team’s services and scheduling rules; no prior rota-design expertise is required.
What you will take away
Plan on-call coverage that includes reachable backups, access, specialist effort, practice and recovery rather than equal shift counts alone.
Sources
NASA Mission Control in Houston during an Apollo 10 telecast, May 19, 1969.
NASA Mission Control in Houston during an Apollo 10 telecast, May 19, 1969. Historical technical operations; the article’s staffing guidance is separate. NASA, Johnson Space Center · Public domain, U.S. government NASA photograph. Resized; uncropped.
On this page3 sections

Every name has the same number of shifts. The calendar looks fair. Then the difficult pages arrive, and the primary responder calls the same specialist for help, night after night.

That hypothetical rotation has shared the first phone call more evenly than the work. A useful on-call plan accounts for both. It connects each covered service and response expectation to people who can acknowledge, investigate, get help and recover before their next commitment.

Start with the service you are promising. Which failures need urgent attention, at what hours, and how quickly? A routine business-hours question belongs in a different arrangement from an overnight service failure. Being explicit about that distinction keeps a rotation from quietly inheriting every unresolved problem.

The first page is the start of the response

Give each shift a primary, a backup who has accepted the assignment and a route to the relevant specialists. The primary might be unable to acknowledge, lack a necessary permission or need relief during a long response. In each case, somebody needs to know that the work has passed to them. A second name on a calendar only helps when that person can actually take the call.

Try the journey before launch. Send a practice page and confirm the responder's production access through read-only checks. Practise state-changing recovery steps in a safe exercise or representative test environment. Then make the usual chat route unavailable within that exercise and try the alternative. A contact list becomes much more informative when somebody has had to use it.

The exercise may reveal a perfectly capable primary who still needs a particular expert. That is a staffing dependency to plan for. The primary need not know everything a specialist knows, but the rotation needs a reachable path to that expertise and an allowance for the time it consumes.

Escalation needs available people and usable access
Escalation path from an urgent page to primary, backup and specialist support.
Backup coverage can take over from an unavailable primary. Specialist help also needs reachable people and usable access.
Read diagram description

An urgent page enters the response path with defined service scope and severity. The primary acknowledges, investigates or requests help. An active backup can take over if the primary is unavailable or provide relief when the primary is overloaded or cannot act. Specialists contribute reachable expertise and the required authority. Check message delivery, access and alternate communication in a safe exercise.

Count that help alongside the primary's response, handoff, recovery and ordinary absence. Otherwise the calendar can commit a specialist to project work during the same hours their assistance is keeping the service running. Google's discussion of on-call makes the connection between operational load and engineering capacity explicit. Its local staffing assumptions need to be examined before borrowing its numbers.

A shadow shift shows where support is missing

Let a newcomer follow a response while an experienced colleague is available, then give them a bounded exercise to lead. Can they interpret the common alert, find the runbook and reach the escalation contact? The purpose is to find out what lets them proceed and what leaves them waiting.

The reason for a pause matters. A locked dashboard calls for access. An unfamiliar recovery branch calls for supported practice. An expert who cannot be reached calls for coverage. Calling all three a training gap would give the newcomer more reading while leaving two of the obstacles in place.

Make the fixes part of qualification. Another rehearsal can show whether the responder now gets from page to investigation with the intended support. That is more useful evidence than knowing they attended the introduction.

The plan has to work after a disrupted night

Leave, sickness and training reduce the people available before the first incident arrives. Include them while building the calendar. Cross-region coverage may move some work out of the night, but the response still needs a handoff when the next region takes over. A shift boundary changes who is responsible; it does not finish the customer's incident.

Agree who arranges cover and which next-day commitments move after a long response or a disrupted night. Follow the organization's scheduling and compensation policies. Recovery time becomes possible when the delivery plan makes room for it. Leaving every commitment in place asks the responder to settle the conflict alone.

After launch, compare overnight interruptions, incident time and repeat specialist calls as well as primary shifts. Include private feedback about work the records miss. The load measurement guide develops how those observations can change staffing, service scope or recurring sources of pages.

Return to our evenly divided calendar. Combining two rotations might halve the visible assignments while waking the same two specialists just as often. It may still make scheduling easier, but a workload claim needs to include their help and recovery. A sound rotation describes the service the whole response team can carry alongside its other work.

Source context

Source links appear within this article. Read them alongside the author’s analysis and evaluate the guidance against your environment.

Report an error or outdated detail

Keep reading

Where to go next