diff --git a/content/en/docs/security/security-response.md b/content/en/docs/security/security-response.md index bb380bf11d25..9035e98b3b61 100644 --- a/content/en/docs/security/security-response.md +++ b/content/en/docs/security/security-response.md @@ -65,7 +65,16 @@ unlikely to make a public disclosure less damaging. ### Fix Team Organization -The Fix Team is made up of the relevant repository maintainers. +The Fix Team is made up of people with the following roles: + +1. Incident commander, the person who will manage the communication around the + incident. +2. Incident investigator(s), typically one or more maintainers of the affected + repositories. +3. Subject matter experts, typically includes the reporter and other + contributors, such as the code owners for the affected components, or + repository approvers who'll provide prompt code reviews for the proposed + fixes. ### TC Role