Incident Governance Policy:
- Incident Commander has final decision authority.
- All major decisions must be documented.
- External communication requires executive approval.
- Safety and data integrity take precedence over speed.
