QUESTION 23: In Step 3: Create and Enforce IT Security Procedures and Enforcement of the IT security defense-in-depth model, all of these are basic secure procedures to put in place EXCEPT:

1. Define enforcement procedures
2. Define a breach response communications plan
3. Designate and empower an external incident response team (IRT)
4. Define notification procedures