When Reliability Meets Security
Recognize when a reliability incident needs security escalation and evidence preservation.
Use a simple trigger: if the incident includes unusual actor behavior, suspected abuse, sensitive-data exposure, unexplained privilege changes, or suspicious traffic patterns, involve security early. SRE still helps restore availability, but the response must preserve evidence and avoid actions that make investigation impossible. The operating pattern is containment with coordination. Rate limiting, feature flags, WAF rules, or traffic shaping may reduce impact while security analyzes indicators. Restarting, deleting, or rebuilding systems can be appropriate, but only after considering evidence needs and approved containment paths.
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in