What are the key recommendations for organizing a cyber incident response capability and how will these recommendations work to mitigate or effectively respond to an adverse cyber incident? Then, link these recommendations to a specific adverse cyber incident like malware or denial of service attack.