“When” Incident Response Plans Over my years reviewing bank incident response plans (IRP) I’ve seen the gamut in approaches. On one end of the spectrum there is the Oracle approach; envision the plethora of possible incidents that could befall the institution and prescribe in great Excel detail the response...