| Event | Who | Channel | Within |
|---|---|---|---|
| Sev 1 incident | Head of Security Operations, MLTFPD Director, on-call | Phone call + secure messaging | 5 min |
| Sev 2 incident | SOC lead, on-call | Secure messaging | 15 min |
| Key ceremony or HSM alarm | Key custodians | Secure messaging + email | 15 min |
| Workflow waiting for approval | Approvers | In-app + email | immediately |
| Weekly posture summary | CISO office | Mondays 09:00 |