Capturing Tribal Knowledge Before It Walks Out the Door

Documentation & Runbooks

Chapter 5 · Capturing Tribal Knowledge Before It Walks Out the Door

Chapters 2 through 4 assumed you already know what needs documenting. This chapter covers a harder problem: knowledge that only exists in one experienced person's head, never written down anywhere at all. This is the more extreme version of Chapter 1's own central claim — here there isn't even a flawed document to fall back on, only what one person happens to remember.

Why This Is a Real, Common Risk

An experienced technician often "just knows" how to handle a specific recurring quirk without ever having written it down — it works fine as long as they're around, and becomes a serious gap the moment they're not, whether that's a resignation, a transfer, or simply being unreachable during an incident that happens to hit while they're on leave.

Why Simply Asking Isn't Enough

People are notoriously bad at fully verbalizing procedural knowledge they perform automatically — steps that have become second nature get silently skipped when someone's asked to just describe what they do, not because they're hiding anything, but because they genuinely stop consciously noticing those steps.

Watch, Don't Just Ask

The single most effective technique is watching someone actually perform the task and writing down what they actually do — not what they said they'd do beforehand. The gap between the interview answer and the observed reality is often exactly where the missing documentation was hiding all along.

Worked example: the interview-vs-observation gap
Asked how they handle a stuck worker process, an experienced technician says: "I just restart the service and check the logs." Watched actually doing it, they also check a specific configuration value first, and wait a specific amount of time before checking logs at all — details they never mentioned, because both had become fully automatic to them. Neither detail was a secret; neither was consciously remembered enough to say out loud.

Two Questions That Draw Out the Rest

  • "What would you do if X specific thing went wrong?" — asked for several plausible failure variations, this draws out troubleshooting and rollback knowledge (Chapter 4's own territory), which tends to be the most tribal knowledge of all, since the failure paths are rehearsed far less often than the happy path
  • "How would you know if this actually worked?" — draws out verification knowledge (also Chapter 4's own territory) that experienced people often check unconsciously without realizing they're doing it at all

Timing: This Is Proactive Work, Not an Emergency

Waiting until someone announces they're leaving is often too late to do this thoroughly — a rushed knowledge-transfer exercise days before someone's last day rarely reproduces the depth a calm, ongoing capture process would. This works best as a routine part of normal operations, not a crisis response.

Whose Knowledge to Prioritize

Start with the people who've been in a specific role or system the longest, and specifically anyone who's the only person who knows how to do a particular task — a genuine single point of failure in the team's own knowledge, worth identifying and addressing deliberately rather than discovering by accident when they're unavailable.

From Notes to a Real Document

Once captured, interview and observation notes are raw material, not a finished product — they still need to become an actual runbook or KB article, following Chapter 2's own document-type distinction and Chapters 3–4's own writing and structural principles, not left sitting as unstructured notes nobody else can easily use.

This isn't a one-time project
Capturing today's tribal knowledge doesn't prevent new tribal knowledge from quietly accumulating again as systems change — a related concern Chapter 7 covers directly for documentation that already exists. Treat this as an ongoing practice, not something to check off once and consider finished.

Hands-On Exercises

Exercise 1

Using the worked example, explain why the technician never mentioned the config-value check or the wait time during the interview, even though neither detail was intentionally withheld.

📄 View solution
Exercise 2

Explain why "what would you do if X went wrong" is described as drawing out the most tribal knowledge of all, more so than questions about the normal happy path.

📄 View solution
Exercise 3

Explain why waiting until someone announces they're leaving is described as often too late, rather than simply less convenient.

📄 View solution

Chapter 5 Quick Reference

  • Tribal knowledge is the extreme version of Chapter 1's own claim — here, nothing was ever written down at all
  • Interviews alone are unreliable — people silently skip steps that have become automatic to them
  • Watching someone actually perform a task reveals what they'd never think to mention
  • Ask about failure paths and verification specifically — both tend to be the most tribal knowledge of all
  • Do this proactively and ongoingly, not as a rushed exercise once someone's already leaving
  • Prioritize single points of failure in the team's own knowledge
  • Notes are raw material — turn them into a real runbook or KB article per Chapters 2–4
  • Next: Chapter 6, documenting without creating a security liability