> For the complete documentation index, see [llms.txt](https://handbook.mattermost.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://handbook.mattermost.com/operations/research-and-development/organization/security_operations.md).

# Security Operations

The Security Operations team is responsible for the security monitoring and operational security policies of the Mattemost organization.

## Areas of Ownership

* Security Incident Response Program
  * Active monitoring and analysis of security events taking place across company, product, and service, platforms
  * Implementation, upkeep, and growth of security monitoring and analysis platforms
  * Availability of log ingestion and processing infrastructure
  * Create, review, and enforce operational security policies, procedures, along with controls related to existing and future-planned compliance frameworks
* Infrastructure Vulnerability Management Program
  * Maintain visibility of industry trends, emerging security issues, 0day/vulnerabilities
  * Contribute to customer security questionnaires on operational security and compliance topics
  * Act on results of Red Team / Penetration Testing against Mattermost (the company) and product/service infrastructure
  * Monitoring and upkeep of Endpoint Detection & Response (EDR)
  * Access control for Engineering tools and services, and integration with Okta
  * Engage in verification and impact of product vulnerabilities as it relates to Community and Cloud-hosted instances
* Analysis, verification, and reaction to phishing and other malicious email
  * Management and upkeep of Vault infrastructure and policies
  * Management and upkeep of Teleport (cloud/company) platform
  * Management and upkeep of Pritunl VPN platform