Information and artifacts associated with security incidents, including files, logs, and screen captures, must be preserved when they may need to be used as evidence of a crime.

Information and artifacts associated with security incidents

— Pyrana Incident Response Policy.pdf

(including but not limited to files, logs, and screen captures)

— Pyrana Incident Response Policy.pdf

must be preserved

— Pyrana Incident Response Policy.pdf

if they need to be used as evidence of a crime

— Pyrana Incident Response Policy.pdf