Enterprise Cloud Security and Governance

Determine whom to notify when an event occurs

There should be a clear document that states the accountability matrix with respect to certain events. Otherwise, when there seems to be some security compromise on the application side and you are not aware of the application owner, then this will delay the time to prevent further breach from happening:

Event type	Owner	Contact details
AWS suspicious events	Suresh	XXXXXX
Endpoint security alerts	Vandana	XXXXXX
Active directory events	Praveen	XXXXXX
Above ALL [manager]	Supratik	XXXXXX

This mapping is very much required as the person monitoring the event might not know the nitty gritty details about all the systems. There will be application owners ...