An incident response plan is a short document that says who to call, who decides, and what gets done in the first hour when something goes wrong. For most small and mid-sized businesses the useful version is one page of roles and phone numbers plus three or four short...