- Get people to safety efficiently by following the floor warden's information and get out if needed
If there are no floor wardens, YOU take the initiative and alert people. Vacate the premises if you suspect danger.
Err on the side of caution. Nobody ever got fired over keeping people safe.
- Get people to safety (yes! double check this)
- Check what is happening
- Stop the bleeding
- Check what you broke while stopping the bleeding
- Check if you need to go into DR mode
- Go into DR mode if that is the fastest way to restore the service
- Only now start to look deeper
Notice what is missing in this list?
- WHY did this happen?
- WHO did what
During the first reactions to an event, stick to the facts of what is happening and the symptoms. If the symptoms are bad, attend to people first, no matter the financial losses occurring.
Remember that financial losses are typically insured. Human life is not. Only loss of income and ability to pay is insured! Not the person's life.
The WHY, HOW, WHO and other root cause questions are asked in the aftermath of the incident and after you have stabilized the situation.
In ITIL terms, those are Problem Management and Root Cause Analysis stage questions.