A sufficient incident response plan provides an action plan for all major incidents. Some incidents result in massive network or data breaches that can affect your organization for days or even months. When a major disruption occurs, your organization needs a comprehensive and detailed incident response plan to help IT personnel quickly stop, contain and control the incident. For physical disruptors, such as natural disasters and floods, create a disaster recovery plan.