Records of all policy and procedure changes must be kept and reviewed by the Board so that an auditable history of governance changes is maintained.

Records of all such changes must be kept

— Pyrana Information Security Policy.pdf

and reviewed by the Board

— Pyrana Information Security Policy.pdf

modify, remove, or approve modifications to these policies and procedures

— Pyrana Information Security Policy.pdf