Incident Response Policy

Security Owner (Admin)

Primary contact for all security incidents. Responsible for initial assessment, escalation, and notifying Amazon within 24 hours.

Developer / Tech Lead

Investigates technical root cause, applies hotfixes, and documents remediation steps within 72 hours.

Operations Manager

Coordinates communication with affected users, manages business continuity, and leads 6-month policy reviews.

All Users

Immediately report any suspected security issues to the Security Owner. Do not attempt independent remediation.