From 44ef5ee72a1acf2216855e0728c17912ffb7cac9 Mon Sep 17 00:00:00 2001
From: Edwin Torres <4247796+edwintorres@users.noreply.github.com>
Date: Thu, 15 Feb 2024 12:38:22 -0400
Subject: [PATCH] Update incident-response.md

Update to incident response doc
---
 docs/incident-response.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/incident-response.md b/docs/incident-response.md
index 1fc25bbd..b4d810fc 100644
--- a/docs/incident-response.md
+++ b/docs/incident-response.md
@@ -2,7 +2,7 @@
 
 1. [Start the report process as per the TTS Handbook.](https://handbook.tts.gsa.gov/security-incidents/) Note that all incidents must be reported within one hour of their discovery.
 
-1. Because Tock is hosted on cloud.gov, notify the cloud.gov team in #cloud-gov.
+1. Because Tock is hosted on cloud.gov, you also need to follow their [Security Incident Response Guide](https://cloud.gov/docs/ops/security-ir/).
 
 1. If the incident impacts the availability of the Tock app, notify the Tock team in #tock-dev. A member of the Tock team will then notify Tock users by posting in #tock.