Sefism is free for learners. We are here to help you grow, one step at a time.Join for free
Sefism.

Checklist · Cloud and DevOps

Production Readiness Checklist

Opens with credits

A production readiness review you can run before launch, or on a service you just inherited. Each check has a severity and a concrete way to verify it, covering ownership, reliability and capacity, observability and alerting, deployment and rollback, data and recovery, security and incident response.

Written by Tauseef Fayyaz7 chapters, 37 checksAbout 15 minReviewed 13 October 2026

What you will learn

7 chapters · about 15 min

  1. 1Ownership and documentationSomeone has to own the service, and the people paged for it need enough written down to act without its author.4 checks · 2 min
  2. 2Reliability and capacityWhether the service meets an agreed target under real load, and fails in contained, predictable ways when something it depends on goes wrong.7 checks · 3 min
  3. Observability and alertingWhether the team will know about a problem before users report it, and have the data to find the cause.6 checks · 2 minOpens with credits
  4. Deployment and rollbackWhether changes reach production through a repeatable, gradual process, and whether a bad change can be undone in minutes.6 checks · 2 minOpens with credits
  5. Data, backups and recoveryWhether data survives mistakes and disasters, and whether the team knows how long recovery takes.4 checks · 2 minOpens with credits
  6. Security basicsThe minimum security posture for a service that handles real users and data. Use a full security checklist for anything sensitive.5 checks · 2 minOpens with credits
  7. Incident readinessWhether the people on call can respond well, and whether the team learns from each incident.5 checks · 2 minOpens with credits

About this checklist

A production readiness checklist answers one question before a service takes real traffic: when it breaks, and it will, will someone find out quickly, know what to do and be able to fix it without making things worse? Most launch problems are not exotic. A call with no timeout ties up every thread. A retry loop with no backoff turns a small blip into an outage. An alert fires into a channel nobody reads. A backup exists but has never been restored. The fix for each is small if you catch it before launch, and painful if you catch it during an incident.

This checklist follows the shape of Google's SRE launch coordination checklist and the reliability chapters of the SRE book and workbook, adapted for a typical team shipping web services and APIs today. The chapters cover ownership and documentation, reliability and capacity, observability and alerting, deployment and rollback, data and recovery, security basics, and incident readiness.

Every check has a severity. A must is something that will turn an ordinary failure into a long or user-visible outage if it is missing. A should closes a common gap that tends to bite within the first few months. A nice adds depth for services that matter more. Every check also says how to verify it: a command to run, a setting to look at, a drill to perform. A box ticked without that evidence does not count.

Run it as a review with the people who will be on call for the service, not as a form one person fills in. It takes an hour or two for a small service, and the gaps it finds become tickets with owners and dates before the launch goes ahead.

Common questions

What is a production readiness review?

It is a structured check, before a service takes real traffic or when a team takes it over, that it can be operated safely: it has an owner, SLOs, capacity headroom, alerts, a tested rollback, working backups and an on-call rotation. Google’s SRE teams use a launch coordination checklist for the same purpose.

When should we run this checklist?

Before a new service or major feature launches, when a team inherits a service, and again every year or after a big architecture change. Run it as a meeting with the people who will be on call, and turn every gap into a ticket with an owner and a date.

Which checks matter most?

Start with the musts: an owner and runbook, defined SLOs, no single point of failure, timeouts and bounded retries on every call, SLO-based alerts that reach on-call, automated deploys with tested rollback, and restored backups. Missing any of these tends to turn small failures into long outages.

How many incidents per on-call shift is too many?

The SRE book treats 2 incidents per 12-hour shift as the maximum a person can handle well, with the median ideally at 0. More than that means alerts need tuning or the service needs reliability work.

Does a backup count if we have never restored it?

No. Restores fail for ordinary reasons such as missing permissions, lost encryption keys or version mismatches. Only a tested restore, timed and repeated on a schedule, tells you whether you can meet your recovery targets.

Sources (8)

Checked against these, last on 13 October 2026.

  1. Launch Coordination Checklist, Google SRE Booksre.google/sre-book/launch-checklist/
  2. Addressing Cascading Failures, Google SRE Booksre.google/sre-book/addressing-cascading-failures/
  3. Being On-Call, Google SRE Booksre.google/sre-book/being-on-call/
  4. Postmortem Culture: Learning from Failure, Google SRE Booksre.google/sre-book/postmortem-culture/
  5. Implementing SLOs, Google SRE Workbooksre.google/workbook/implementing-slos/
  6. Alerting on SLOs, Google SRE Workbooksre.google/workbook/alerting-on-slos/
  7. Capabilities: Deployment automation, DORAdora.dev/capabilities/deployment-automation/
  8. Liveness, Readiness, and Startup Probes, Kubernetes docskubernetes.io/docs/concepts/configuration/liveness-readiness-startup-probes/

Picked from the other libraries by shared topics.

Work with me

Stuck on something specific?

Writing only gets you so far. If you want an answer to your situation rather than the general case, book a session and we will work through it together. Sessions are free for approved Sefism members, and a few slots open each week.

  • 1:1 Mentorship
  • Fresh Graduate Mentorship
  • Career Guidance

Brand deals, promos and partnerships: tauseeffayyaz@gmail.com