I'm curious if I should update the security and operations contacts for our organization's member accounts if all of our notifications are already consolidated to our main billing account. Is there any real benefit to doing this?
3 Answers
It's definitely a good idea to keep all contact fields filled out, just in case. I've seen situations where clients struggle because they relied on individual email addresses for contact forms, and when those people left, they never updated the info. It's much safer to have a mailing list for the root user email so that multiple people receive important updates. Believe me, you don't want to miss notifications about security incidents just because your ops contact is going to an inactive inbox.
You'd be glad to have an alternative security contact if you ever lose access to your MFA or phone number linked to your root account. It happens more often than you'd think. Having that backup contact can be a lifesaver if something goes wrong.
I see your point about the main contact being a distribution list and everything being centralized. However, I'd still recommend keeping the alternative contact in place just as a precaution. Better safe than sorry!
That makes sense, keeping everything updated could save you from a big headache later.