Policy 4: Security & Incident Response Plan

4.1 Purpose

This policy establishes security protocols and incident response procedures to protect organizational crypto assets and respond effectively to security breaches or suspected compromises.

|

4.2 Security Protocols

4.2.1 Access Security

All signers must enable multi-factor authentication on all crypto-related accounts
Unique, strong passwords required for each platform (minimum 16 characters)
Password managers required; approved options: [list approved tools]
No shared accounts or credentials between staff members

4.2.2 Device Security

Crypto transactions only from organization-approved devices
Devices must have current operating systems and security patches
Antivirus/anti-malware software required
No crypto transactions on public WiFi without VPN

4.2.3 Operational Security

Bookmark official URLs for all platforms; never click links from emails or messages
Verify all transaction details before signing
Never share seed phrases, private keys, or full wallet screenshots
Test transactions with small amounts before large transfers

4.3 Incident Classification

Level	Description	Examples
CRITICAL	Confirmed loss or active compromise	Unauthorized transaction, wallet drained, seed phrase exposed
HIGH	Suspected compromise or high-risk activity	Suspicious login, phishing attempt clicked, signer device stolen
MEDIUM	Potential vulnerability identified	Unusual activity detected, policy violation, failed login attempts