An information security manager developing an incident response plan MUST ensure it includes: