If an incident is confirmed, the CTO must assess organizational impact and assign a severity level so that the required level of remediation effort can be determined.

If the incident is confirmed

— Pyrana Incident Response Policy.pdf

the CTO must assess the impact on the organization and assign a severity level

— Pyrana Incident Response Policy.pdf

which will determine the level of remediation effort required

— Pyrana Incident Response Policy.pdf