Information collected to determine whether malicious activity occurred must be preserved and provided to law enforcement when the incident is determined to be malicious so that potential criminal investigation evidence is retained.

determine if any malicious activity has taken place.

— Pyrana Incident Response Policy.pdf

All such information must be preserved

— Pyrana Incident Response Policy.pdf

provided to law enforcement if the incident is determined to be malicious.

— Pyrana Incident Response Policy.pdf