olemus
ISACA:
intsidendihalduse operatiivkomponent, sisaldab
dokumenteeritud protseduure ja juhiseid
intsidentide tähtsuse määramiseks,
teatamiseks ja käsitluse laiendamiseks,
ning taasteprotseduure
= the operational component of incident management;
scope note: the plan includes documented procedures and guidelines for defining the criticality of incidents,
reporting and escalation process, and recovery procedures

NIST SP 800-34 Rev.1:
the documentation of a predetermined set of instructions or procedures to detect, respond to, and limit consequences of a malicious cyber attacks against an organization’s information systems(s)

ülevaateid
https://security.berkeley.edu/incident-response-planning-guideline

http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf (subsection 2.3)

https://www.us-cert.gov/sites/default/files/ncirp/National_Cyber_Incident_Response_Plan.pdf

https://www.template.net/business/plan-templates/incident-response-plan/