Incident response plans are an important part of any security team’s repertoire, but figuring out where to start can be difficult. Unfortunately, it’s not a matter of if an incident happens but when.