Primary on-call duties
~38 tokPrimary on-call acknowledges pages within 15 minutes, triages alerts, and escalates SEV-1/2 per the IR runbook. Handoffs occur Monday 16:00 local with written status notes in the ops channel.
Sources
On-Call Security Playbook
Paging, handoff, and escalation for security operations
Indexed
confluence
Runbooks & Incident Response
Updated Jul 30Chunks (2)
Escalation ladder
~37 tokIf primary is unreachable after 15 minutes, secondary is paged. Engineering manager and CISO are notified for SEV-1. External IR retainers may be engaged by CISO authorization only.