Upon receiving a personal device incident report, the CTO or designated responder must reset the user's passwords and revoke active sessions so that compromised access is terminated.

Upon receiving such a report, the CTO or designated responder must:

— Pyrana Incident Response Policy.pdf

Reset the user's passwords and revoke active sessions

— Pyrana Incident Response Policy.pdf

Users must report any lost, stolen, or suspected-compromised personal device used for company work

— Pyrana Incident Response Policy.pdf