AWS security-ir documentation change
Summary
Updated team references from 'AWS SIRE' to 'Security Incident Response Engineering' in incident workflow descriptions.
Security assessment
Terminology standardization with no impact on security posture or vulnerability management. Incident response process remains unchanged.
Diff
diff --git a/security-ir/latest/userguide/monitoring-and-investigation.md b/security-ir/latest/userguide/monitoring-and-investigation.md index c592beaf0..ce6bca097 100644 --- a//security-ir/latest/userguide/monitoring-and-investigation.md +++ b//security-ir/latest/userguide/monitoring-and-investigation.md @@ -9 +9 @@ -AWS Security Incident Response reviews and triages security alerts from Amazon GuardDuty and AWS Security Hub CSPM, then configures suppression rules based on your environment to prevent unnecessary alerts. The AWS Security Incident Response Engineering (SIRE) team investigates findings and quickly escalates and guides your team to rapidly contain potential issues. If desired, you can grant AWS Security Incident Response permission to implement containment actions on your behalf. +AWS Security Incident Response reviews and triages security alerts from Amazon GuardDuty and AWS Security Hub CSPM, then configures suppression rules based on your environment to prevent unnecessary alerts. The Security Incident Response Engineering team investigates findings and quickly escalates and guides your team to rapidly contain potential issues. If desired, you can grant AWS Security Incident Response permission to implement containment actions on your behalf. @@ -13 +13 @@ AWS Security Incident Response aligns to the NIST 800-61r2 [_Computer Security e -When AWS Security Incident Response identifies a security alert or you request security assistance, the AWS SIRE investigates. The team collects log events and service data such as GuardDuty alerts, triages and analyzes that data, performs remediation and containment activities, and provides post-incident reporting. +When AWS Security Incident Response identifies a security alert or you request security assistance, Security Incident Response Engineering investigates. The team collects log events and service data such as GuardDuty alerts, triages and analyzes that data, performs remediation and containment activities, and provides post-incident reporting.