...
If the incident poses any kind of immediate danger, the Alpha Serve CEO should be informed immediately by email and telephone. Only the CEO can be responsible for final risks evaluation and further decisions on communication with customers (if affected) and Atlassian (if relevant) by creating an App Security Incident ticket.
The CEO and relevant team members will stay available to communicate with Atlassian security team during resolution and inform them when the incident is resolved, and/or in case Atlassian needs to take necessary action to prevent additional breaches.
Incident Resolution and Post-Incident Review
...