TQ 4.1: What is an "incident response" plan? What steps does it usually entail and how are they scoped? TQ 4.2: Following the discovery of a security incident, like a data breach, what are a company's legal obligations? Rank them in order. TQ 4.3: What are some common claims and defenses typically seen in consumer litigation after an incident, like a data breach, is discovered? How are these cases typically resolved? TQ 4.4: What are some common causes of poor security practices? Briefly describe them. TQ 4.5: Are some consumers more prone to experiencing security incidents? What does recent research suggest?