The policy applies to all users of organizational information systems, including employees, contractors, and external parties who interact with systems and information controlled by the organization so that all relevant users are covered by the incident response requirements.

This policy applies to all users of information systems within the organization

— Pyrana Incident Response Policy.pdf

This typically includes employees and contractors

— Pyrana Incident Response Policy.pdf

as well as any external parties that come into contact with systems and information controlled by the organization

— Pyrana Incident Response Policy.pdf

(hereinafter referred to as "users")

— Pyrana Incident Response Policy.pdf