diff --git a/ehh/README.md b/ehh/README.md
new file mode 100644
index 0000000000000000000000000000000000000000..741c3b092c027db05422d207c346f0a09458f578
--- /dev/null
+++ b/ehh/README.md
@@ -0,0 +1,26 @@
+ehh - Emergency Host Helper
+===
+
+This tool is supposed to be used to incident response and analysis. Main goal is to perform the most basic tests and provide tooling to get an incident response started.
+
+Tasks
+---
+
+This functionality should be provided at end (in best case in a single command) when an incident is discovered:
+
+- [ ] Verify internet connection
+- [ ] Verify VPN connection
+- [ ] Set up Incident Response call
+- [ ] Set up Collaboration Document / Fall back to local document
+- [ ] Open Status Page for Updates
+- [ ] Open Metrics endpoints
+- [ ] Open Dashboards
+- [ ] Open Checklist(s)
+- [ ] Open Operational Documentation
+
+Addtional functionality:
+
+- [ ] Allow automatic reporting to external team
+- [ ] Announce Status to Statuspage
+
+