It needs a runbook, named roles, abort conditions and a communication plan agreed beforehand.