Who is actually watching our security alerts when something goes wrong?

Define who receives each type of alert, when they are expected to respond, and what happens outside normal hours. Test the alert path so important events do not land in an unattended inbox.