diff --git a/wizard-work/quill/post-incident-review-template.md b/wizard-work/quill/post-incident-review-template.md
new file mode 100644
index 0000000..95e56db
--- /dev/null
+++ b/wizard-work/quill/post-incident-review-template.md
@@ -0,0 +1,41 @@
+# Post-Incident Review Template
+
+## Incident Summary
+- **Incident ID:** 
+- **Severity:** P1 / P2 / P3 / P4
+- **Date/Time Detected:** 
+- **Date/Time Resolved:** 
+- **Duration:** 
+- **Owner:** 
+
+## Timeline
+| Time (UTC) | Event | Source |
+|------------|-------|--------|
+|            |       |        |
+|            |       |        |
+
+## Blast Radius
+- Systems affected:
+- Users/customers affected:
+- Data exposure:
+
+## Root Cause
+- Contributing factors:
+- Primary cause:
+
+## Remediation Steps (Already Completed)
+1. 
+2. 
+
+## Action Items
+| # | Action | Owner | Due Date | Status |
+|---|--------|-------|----------|--------|
+| 1 |        |       |          |        |
+
+## Lessons Learned
+- What went well:
+- What could improve:
+- Follow-up training needed:
+
+---
+*Template version: 1.0 | Maintained by: quill*