1. Introduction

This policy outlines the response procedures for any security incidents that may occur with our SaaS solution, yayloh, owned by Tectry Software AB. The purpose of this policy is to ensure that any incidents are handled in a timely and efficient manner, minimizing the impact on our customers and our business.

‍

2. Incident Reporting

Any security incidents or suspected incidents should be reported immediately to the Yayloh security team. This will be done through the JIRA incident reporting form or by the dedicated security channel - security@yayloh.com. Incident reports include the following information:

1. Date and time of the incident
2. Description of the incident
3. Systems or data affected by the incident
4. Any actions taken to contain or mitigate the incident

‍

3. Incident Response Team

An incident response team (IRT) will be designated to manage any security incidents that occur. The IRT will be responsible for the following:

1. Identifying the cause and scope of the incident
2. Containing and mitigating the incident
3. Communicating with customers and stakeholders about the incident
4. Reporting the incident to relevant authorities if required

The IRT will consist of the following roles:

1. Incident Manager: responsible for overall incident management and communication
2. Technical Lead: responsible for technical analysis and response
3. Communications Lead: responsible for communication with customers and stakeholders
4. Legal Lead: responsible for legal compliance and reporting requirements

‍

4. Incident Response Procedures

When an incident is reported, the incident response team will follow the following procedures:

1. Assess the incident: the team will assess the incident to determine its severity and impact on customers and the business.
2. Contain the incident: the team will take immediate action to contain the incident and prevent further damage.
3. Mitigate the incident: the team will work to minimize the impact of the incident and restore normal operations as quickly as possible.
4. Communicate with stakeholders: the team will communicate with customers and stakeholders about the incident, providing updates on the situation and any actions being taken to resolve it.
5. Review and report: the team will review the incident and develop a report outlining the cause, scope, and impact of the incident. This report will be used to improve incident response procedures and prevent similar incidents from occurring in the future.

‍

5. Training and Testing

All staff involved in incident response will receive regular training on incident response procedures. The incident response procedures will also be regularly tested through simulations and exercises to ensure that they are effective and up-to-date.

‍

6. Conclusion

This security incident response policy is designed to ensure that any security incidents with our SaaS solution, yayloh, owned by Tectry Software AB, are handled in a timely and efficient manner. By following these procedures, we can minimize the impact on our customers and our business, and prevent similar incidents from occurring in the future.

‍