Management must review and approve policy and procedure documents annually or whenever significant changes occur so that governance documentation remains current and authorized.

The policies and procedure documents are reviewed and approved by management

— Pyrana Information Security Policy.pdf

annually

— Pyrana Information Security Policy.pdf

or during significant changes

— Pyrana Information Security Policy.pdf