Studio - Incident Response Policy
Effective: 21 July 2026

1. An incident is any actual or suspected breach of content or information security.
2. Report immediately to the Security Lead via the designated channel.
3. Response phases: Identify -> Contain -> Eradicate -> Recover -> Review.
4. Affected clients are notified per contractual and legal obligations without undue delay.
5. Evidence and a timeline are preserved; the event log and access trail are reviewed.
6. A post-incident review captures root cause and corrective actions.