# What to expect from AWS Security Incident Response engineers
<a name="what-to-expect-from-aws-sir-engineers"></a>

 When you open an AWS supported case, a Security Incident Response engineer is assigned to your incident. Your assigned responder will: 
+ Review the initial information you provided in the case
+ Analyze relevant AWS service logs and security findings
+ Identify the scope and impact of the security incident
+ Develop an investigation and response plan tailored to your situation

 **Response timeline**: The service level objective (SLO) for acknowledgment of new cases by AWS Security Incident Response engineers is within 15 minutes. The initial assessment timeline might vary based on case severity and complexity. If AWS Security Incident Response engineers don't receive a response or critical information from you within 5 business days, the case is closed.