The Incident Response (IR) plan specifies the actions an organization can and should take while an adverse event is in progress. In the creation of the IR plan cyber security intelligence and experts are involved. This plan helps organizations to prepare for data breaches, to manage them, and recover from them if they occur.