Users must be trained on incident and vulnerability reporting procedures and on their responsibility to report such events so that reporting obligations are understood.

Users must be trained

— Pyrana Incident Response Policy.pdf

on the procedures for reporting information security incidents or discovered vulnerabilities

— Pyrana Incident Response Policy.pdf

and their responsibilities to report such incidents

— Pyrana Incident Response Policy.pdf