An incident response plan is a formal set of detailed steps a company needs to take to prepare itself for the occurrence of a cyber security incident, to be able to detect such an incident, to manage its consequences, and to get back to normal after a cyber security incident.