All technical steps taken during an incident must be documented in the organization’s incident log so that the response record is preserved for accountability and review.

All technical steps taken during an incident must be documented

— Pyrana Incident Response Policy.pdf

in the organization's incident log

— Pyrana Incident Response Policy.pdf

and must contain the following:

— Pyrana Incident Response Policy.pdf