We at Lyric are committed to protecting the confidentiality, integrity, and availability of the services provided and our customer data (information stored, processed, and transmitted as part of our product usage by customers). We have formulated a CyberSecurity Steering Committee (CSSC) comprising of the executive leadership team (CEO, Head of Product, Head of Engineering, and Head of Information security & privacy) who will own security vision and strategy for meeting the required compliance with industry standards and continuous improvement of the security posture. Information Security Policies are defined for the necessary and applicable processes and shall be implemented and audited at least annually. We are ISO 27001 certified and attested for SOC 2. Audit reports can be downloaded from this portal.
- Is the unauthorized addition, removal, update, and management of organization assets restricted?
- Is data classified according to type and sensitivity levels?
- Is the disaster response plan exercised annually or when significant changes occur?
- Is an SDLC process defined and implemented for application design, development, deployment, and operation per organizationally designed security requirements?
- Is a risk-based corrective action plan to remediate audit findings established, documented, approved, communicated, applied, evaluated, and maintained?



