Users must be trained on incident and vulnerability reporting procedures and on their responsibility to report information security incidents so that reporting obligations are understood and followed.

Users must be trained

— Pyrana Incident Response Policy.pdf

on the procedures for reporting information security incidents or discovered vulnerabilities

— Pyrana Incident Response Policy.pdf

and their responsibilities to report such incidents

— Pyrana Incident Response Policy.pdf