Stand up a written IR plan, define roles, and run a tabletop.
What good looks like — maturity levels
This is a foundational area — relevant to organizations of every size.
Basic
1-page incident runbook
Standard
Written plan, roles defined
Formal
Tested plan + tabletop (IR-firm retainer at scale)
This library is general education, not advice about your specific organization. It describes what each control is and what strong practice looks like; whether and how any of it applies to you is your decision, in consultation with your carrier, broker, or counsel.