On-call that matches payment hours
Wallet and card traffic does not sleep because your roster prefers office hours.
- on-call
- operations
Fintech incident plans often assume weekday coverage while merchant and remittance loads peak on evenings and weekends. Audits should compare alert volume by hour against who is actually reachable.
Primary and secondary contacts need tested numbers, not shared inboxes that nobody owns after 19:00. Escalation trees should name people, not departments.
If tooling requires office VPN and the on-call engineer is at home, containment authority is fiction. Fix access paths before polishing the recovery narrative.
Tabletop reviews expose these gaps faster than another policy workshop.