The CTO and CISO must conduct a preliminary investigation and risk assessment to review and confirm incident details when an incident may affect customers so that the organization validates the situation before further action.

The CTO and CISO shall conduct a preliminary investigation and risk assessment

— Pyrana Incident Response Policy.pdf

to review and confirm the details of the incident

— Pyrana Incident Response Policy.pdf

When an incident is confirmed or reasonably suspected to affect customer data or customer-facing services

— Pyrana Incident Response Policy.pdf