兩分鐘升級事件簡報：支援主管可直接複製的 AI 提示詞

Executives don't want the 60-message thread. They want to know the impact, where things stand, who owns it and what you need from them. When an escalation is open, that one page is what leadership reads, and it's the page that's hardest to write while you're also working the fix.

Below is a prompt that writes the first draft of that page for you. Paste it into ChatGPT, Claude, Gemini or whatever AI assistant your team uses, paste the thread and the ticket under it, and you get back a brief a VP can read in two minutes. You check it, then you post it. Everything you need is in this post: the prompt, what to fill in, a worked example and what to check before you send it on.

When to use it

When: on demand while an escalation is open, and again before each leadership update.
What to give it: the chat thread or email chain, and the ticket.
Who gets the draft: you. You post it to leadership after you've checked it.

The prompt

Copy this as it is. The two parts in square brackets are the only things you change.

Summarize the escalation below for a VP who has two minutes.
Use these headings, under 250 words in total:
Customer impact | Timeline | Current status | Owner | Next update | What we need from leadership
Then list open questions.

Convert every time to [your time zone] and show the day. If a time has no zone, or a label like CET that could mean summer or winter time, keep the original and tag it [CONFIRM].
Use only what's in the thread and the ticket. If the thread has a theory about the cause, label it "Hypothesis" and say who raised it. Don't state a root cause unless someone in the thread confirmed it.
Describe what happened, not who's to blame.
If a heading has nothing in the thread, write "Not in thread". Don't fill it in.
This is a draft for me. Don't post it anywhere.

Thread and ticket:
[paste the thread and the ticket here]

Fill in before you paste

[your time zone]: the one your leadership reads in, like ET. Threads often mix time zones, and that's where briefs go wrong.
[paste the thread and the ticket here]: the whole thread, oldest message first. If your agent can read your chat tool directly, name the channel and ticket number instead.

Why each line is there

Fixed headings and a word limit. Leadership gets the same shape every time, so they know where to look for impact and for what you need from them.
Times converted, odd ones tagged. A brief that says "17:30" when it meant "17:30 in Berlin" sends people to the wrong meeting. Anything the assistant can't convert for sure gets a [CONFIRM] tag for you to fix.
"Hypothesis" instead of a cause. Threads are full of guesses. The prompt keeps a guess labelled as a guess, with the name of whoever raised it, until someone confirms it.
"Not in thread" instead of filling gaps. An empty heading tells you what to chase before you post. A filled in guess hides it.
Draft only. Nothing goes to leadership until you've read it.

A worked example

Everything here is made up: the company, the people, the ticket and the numbers.

Here is a short thread you might paste in:

Ticket #1234, Acme Widgets, priority high

Mon 9:12 AM PT, Priya (Acme ops lead): Since this morning none of our warehouse staff can log in to the scanner app. Around 40 people are stuck. We ship at 2 PM.
Mon 9:30 AM PT, Sam (support): Thanks Priya, I can see the same thing on our side. Pulling in engineering now.
Mon 10:05 AM PT, Jordan (engineering): Started after last night's SSO certificate rotation, could be that.
Mon 10:40 AM PT, Jordan: Workaround: staff can sign in with the backup PIN login. Steps sent to Sam.
Mon 10:52 AM PT, Sam: Workaround sent to Priya.
Mon 11:15 AM PT, Priya: PIN login works for most people. A few still can't get in.
Mon 17:30 CET, Marta (engineering): Fix is ready, deploying after review.

With [your time zone] set to ET, the draft that comes back should look something like this:

Customer impact
Warehouse staff at Acme Widgets can't log in to the scanner app. About 40 people
affected (customer's estimate). They ship at 2 PM [CONFIRM], time zone not stated.

Timeline (ET)
Mon 12:12 PM  First customer report, ticket #1234
Mon 12:30 PM  Support confirmed the problem, engineering joined
Mon 1:40 PM   Workaround found: backup PIN login
Mon 1:52 PM   Workaround sent to the customer
Mon 2:15 PM   Customer: PIN login works for most staff, a few still locked out
Mon 17:30 CET [CONFIRM]  Fix ready, deploying after review

Current status
Workaround in place for most users. Fix ready, waiting on review before deploy.

Owner
Sam (support), Jordan and Marta (engineering)

Next update
Not in thread

What we need from leadership
Not in thread

Open questions
- How many staff are still locked out after the workaround? Nobody counted.
- Hypothesis (raised by Jordan): last night's SSO certificate rotation. Not confirmed.
- When will the fix deploy? Nobody gave a time.

Look at what that draft hands you before you post it. Two times need a human to confirm. Two headings say "Not in thread", so you need to set the next update time and decide whether you need anything from leadership. And the certificate rotation is still a theory, so nobody upstairs should hear it as the cause.

Check it before you post it

Look for the word "because". If the summary sounds more sure than the thread, that's usually where it happens. Assistants like to turn a hunch into a cause. Anything presented as a cause should be labelled a hypothesis.
No names in blame language. People's names belong under Owner, not next to what went wrong.
You post it, not the assistant.

Two ways to tune it

Paste in your own severity definitions, so "Sev1" means what it means at your company.
Ask for a second draft in plain language with no internal names. That's your starting point for the customer update, so you go into the next customer conversation with the same facts leadership has.

If you want this play as a 3-page PDF with the fill-in list, guardrails and a made-up sample result, it's free here: draftfirstcs.com/free.