This is an impressive document by an obviously well informed team. Thank you for your dedication.
With regard to the security breach issues: Is there a separate protocol outlining specific measures to be taken in the event of a breach that might shed more light on the series of actions to be taken and timeline involved in the event of a breach?
If a specific protocol has not been developed, then my opinion is that the final section of the document may need more thought heading into v3. While I completely understand that the urgency and gravity of a security issue won’t allow for a vote on action, I am concerned that the policy as written is not detailed enough regarding informing members, crafting the messaging to the public, reacting to panic, etc.
If there is already such a protocol in place, could you please direct me to it?
Thank you again for your work and commitment.