Does Freyr have a policy for responding to security incidents and defining acceptable remediation time frames?

Yes, Freyr has a defined SOP (FRE/IRMS/QMS/SOP/018) for Incident Management, outlining the response and remediation time frames for specific types of incidents.