We want to migrate Jira to cloud next year. Now applying some Jira add-on plugins like JMCF. Fill some forms and then security team need to review it. Want to confirm something below:
1.The definition of incident severity?
Who define the incident severity? Ourselves or by Atlassian?
And is there incident definition document?
Which incident could be defined as High, Medium or Low level incident?
2.Committed incident response time?
When different severity incidents happen, what committed response time according to that level. Are there any documents about it?
Document content example like below:
Level ---- Committed response time
High <=1h
Medium <=4h
Low <=8h
Many thanks!
