1. A method of managing service level agreements (SLAs) for security incidents in a computing environment, the method comprising: identifying a rule set for a security incident of the security incidents wherein the rule set is associated with one or more action recommendations to be taken against the security incident; identifying a default SLA for the security incident based on the rule set, wherein the default SLA comprises a default hierarchy of administrators for the security incident; obtaining environmental characteristics related to the security incident, wherein the environmental characteristics comprise at least a severity level of the security incident; determining a modified SLA for the security incident based on the environmental characteristics, wherein the modified SLA comprises a second hierarchy of administrators for the security incident, and wherein the modified SLA is based on the severity level of the security incident; providing the one or more action recommendations to administrators based on the second hierarchy of administrators of the modified SLA; and obtaining input from at least one administrator in the second hierarchy of administrators regarding at least one action recommendation of the one or more action recommendations.