River
Y CombinatorBacked by Y Combinator

Business & Revenue OpsFree

System Cutover Communication Plan Template

Send your cutover runbook, get every message timed to its own step, including the fallback draft you hope never sends.

Start here

Search this and page one converges on a spreadsheet trick or a calendar. AWS's own migration governance playbook recommends eight fixed calendar gates, T-28 through hypercare complete, templated against the cutover date rather than against what actually happens that day. A cutover-plan vendor's own guidance is to tag rows in the master spreadsheet with a label such as Comms, then filter on it. The deliverable is a free-text task description like Send freeze notice, never a drafted message anybody could actually send. Neither approach touches the message everyone skips.

This tool reads the runbook you already have, including one a migration plan already produced, and times every message off the step that actually triggers it, not the clock. A go or no-go announcement fires when that gate closes, wherever it lands, so it cannot go out before the decision exists. The fallback message gets written in full now, addressed to the people who will actually read it, and it carries its own trigger: send this exact message within a set number of minutes if the gate returns no-go.

On a worked plan for Fenmore & Cole, a 34-store apparel chain, the freeze ran 32 hours over its annual inventory weekend, Friday 10 PM to Sunday 6 AM. The go or no-go gate was planned for hour 18, Saturday 4 PM. Three of the 34 stores ran long on their loyalty-history export, so the gate actually closed at hour 21, Saturday 7 PM instead. A calendar-anchored plan would already have sent its evening update. This one waited, then set the fallback deadline 15 minutes past whatever hour the gate closed.

A fixed clock time cannot wait for a gate to actually close

Where a fallback message exists at all, it is a fill-in-the-blank line, not something ready to send. StackPractices' own rollout communication template offers exactly one pre-written rollback line: "We have temporarily rolled back release due to issue. The team is investigating and will re-deploy once resolved. Impact: scope." That is a sentence for an engineer to fill in mid-incident, aimed at a technical channel, not a message a store manager or a finance lead could read and understand.

A cutover runbook treats rollback as a technical action, not a communication. gfacility's own runbook template gives rollback its own column, Reset to read-write, Snapshot restore, each tied to a fixed clock time such as Fri 18:00. That column tells an engineer what to undo. It says nothing to the 34 store teams who need to hear, in plain language, that nothing is lost and nothing changes for Monday, or to the finance team reading a reporting period that may now be split.

Fenmore & Cole's fallback message is written before the freeze starts, and its go/no-go gate is the same one a dedicated sign-off pass already tested. It tells the 34 stores the current point of sale stays live and nothing rung up over the weekend is lost. A second version goes to the card processor and the loyalty vendor, naming which endpoints stay live. A third goes to corporate finance, naming which reporting period the rollback keeps whole. All three sit ready, tagged to the same no-go trigger, before anyone needs them.

How it works

  1. Send your runbook

    The steps, the owners, and the gate that decides go or no-go, in whatever form you already have it.

  2. Times get computed

    Every message anchored to the runbook step that triggers it, so a slipped gate moves the message with it.

  3. The fallback gets drafted

    Written in full now, addressed to each audience, tagged to the exact no-go trigger that would send it.

  4. Run the sequence

    One document with every message, its trigger, its sender and its channel, from the freeze notice to the follow-up.

What you get

  • Send times computed from your runbook's own steps, not from a fixed calendar date or clock.
  • The fallback message drafted in full before the freeze starts, tagged to its own no-go trigger.
  • Three audiences kept separate: system users, outside integration parties, and stakeholders who never touch a register.
  • The all-clear names what is still deliberately missing, instead of claiming a finish nobody can verify.
  • Every message assigned a named sender and a channel, so nobody discovers mid-freeze that they own it.
  • One sequence spanning the freeze notice through the post-cutover follow-up, not only the go-live moment.

Common questions

We already write a comms calendar with dates. What does this add?

A trigger instead of a date. Your calendar fires an update on Saturday evening regardless of whether the gate closed. This ties the same message to the runbook row itself, so if that gate slips three hours the message waits three hours too. The fallback deadline resets from whenever the gate actually closes, not from a time that already passed.

Do you write the actual message bodies, or just a schedule?

Full bodies, not a schedule of subject lines. Every message, including the fallback, comes back drafted in the words the actual audience needs: what changed, what they do next, and what stays the same. A schedule with no body is what most templates already give you, and it is the part that costs no time to write.

Why does the fallback message matter so much?

Because it is the one message almost nobody has ready. Search any cutover template and the freeze notice and the go-live announcement are always drafted. The rollback announcement is usually one filled-in-blank line or a technical action column, not a full message a non-technical reader can act on the day it matters most.

What if our runbook doesn't have a formal go/no-go gate yet?

Then that becomes the first thing this produces. A comms sequence needs one clear point where a decision gets made, even if your runbook currently just lists tasks. Tell us the step after which the business is genuinely committed, and everything else, the freeze notice, the fallback trigger, the all-clear, times itself against that point.

How is this different from the Comms Plan in the System Migration Plan template?

That plan is generated together with a brand-new migration built from your record counts and ceilings. This tool skips the rest of that package: send it a runbook you already have, built anywhere, for any kind of cutover, and it returns only the timed message sequence and the drafted fallback.

Who should actually own sending these messages?

Name a sender per message, not one project lead for everything. The freeze notice and the day-of updates usually come from whoever runs the cutover. The fallback and the all-clear carry more weight, so this plan asks you to name the specific person, by role, who sends each one if its trigger fires.

What happens to messaging after the freeze window closes?

It gets a status, not silence. The plan includes the post-cutover follow-up: what reconciled, what did not, and what the team adopting the new system needs next, sent once the numbers are in. A cutover that ends at the all-clear and never follows up is why the next one starts from scratch, and why a renewal conversation later starts with no evidence of what the system delivered.

System Cutover Communication Plan Template

Fill in the form and your workspace opens with the work already underway.