Recall that once an incident has been confirmed and classified properly, the IR plan moves into the detection phase.
Summarize the action steps for reacting to incidents. They include:
Notifying key personnel
Documenting the incident(s)
Strategizing an incident containment plan to minimize impact to the organization
Escalating the incident, if applicable