Information and artifacts associated with security incidents, including files, logs, and screen captures, must be preserved when they may be needed as evidence of a crime.

Information and artifacts associated with security incidents

— Pyrana Incident Response Policy.pdf

including but not limited to files, logs, and screen captures

— Pyrana Incident Response Policy.pdf

must be preserved

— Pyrana Incident Response Policy.pdf

if they need to be used as evidence of a crime

— Pyrana Incident Response Policy.pdf