Background:

You are a risk manager at Secure-Your-Files, Inc., a company in the business of providing "a safe environment for storing sensitive customer, intellectual property, and trade secret information."Most of your storage clients are hospitals and Silicon Valley technology startups.You are charged with cybersecurity risk management and you report directly to the board of directors. You have just been informed that the company's intrusion detection system has detected certain anomalies, the presence of malware, and the potential exfiltration of data from the server which stores customer, IP and trade secret information for the company's clients.As part of your duties you had drafted the company's Incident Response (IR) plan.

Whattwopolicies and procedures would you include in your IR plan?