Our Security Incident Response Program are setup as follows:
DGIT follows the events and informs the application team in case there is a specific security breach that we should be aware of.
Microsoft also keeps track of this and inform us through DGIT in case of that kind of events.
In case of a security breach, we will notify relevant customers.
Three different layers:
Microsoft Azure Security Monitor
DGIT Infrastructure Monitoring Team
EC&S security board – Contacted through Nestor