Security Response Team

A security response service gives an organization access to security specialists when a security event affects its applications. The specialists examine the event, analyze the threat behind it, and help decide how to contain it.

Security Response Team (SRT) gives you, on request, access to Azion personnel or designated security specialists for security response activities within the contracted scope. Use SRT to review security events, analyze threats, investigate an attack, get mitigation guidance during or after a DDoS attack, or build custom security rules.

Scope

According to the applicable scope, SRT can include these activities:

• Review of security events.
• Threat analysis.
• Attack investigation.
• Mitigation guidance.
• Support during or after a DDoS attack or another supported security event.
• Construction of custom security rules.
• Coordination with Support or other Azion teams.
• Other security response activities, according to the applicable scope.

Engagement model

SRT starts from your request, and you keep the decisions:

• Your request: SRT works on your request, for security response activities within the contracted scope.
• Guidance: Azion personnel or designated security specialists can give guidance or recommendations.
• Your decision: you decide whether to implement each recommendation or requested configuration.
• Actions: when Azion takes action on your instructions, requests, approvals, or pre-authorizations, the exclusions below apply.

If you delay or withhold approval for a requested action, Azion is not responsible for the effects of that delay or refusal.

Responsibilities and limits

• Your security: you remain responsible for the security of your applications, origins, configurations, access controls, data, and systems.
• Actions you direct: Azion is not responsible for the effects of actions taken on your instructions, requests, approvals, or pre-authorizations. These effects include failures, impacts, service unavailability, performance degradation, and security issues.
• Other exclusions: Azion is also not responsible for effects that result from these causes:
  • Failure to follow Azion’s instructions or recommendations.
  • Incomplete or inaccurate information you provide.
  • Third-party services.
  • Origin unavailability.
  • Changes you make outside the agreed scope.
• No guaranteed outcome: Azion does not guarantee that every attack, threat, vulnerability, or incident is prevented, detected, mitigated, or resolved.

Contracting and billing

SRT is a monthly package of contracted hours, valid during the applicable monthly period. The Customer Agreement or the documents attached to it define the monthly hours limit. Unused hours do not roll over to the next month.

Unless the Customer Agreement or its attached documents say otherwise, SRT is billed by the number of contracted Recurring Service Packages. See Service Packages in the billing metrics.