SCENARIO

Please use the following to answer the next question:

The risk committee of your organization is particularly concerned not only by the number and frequency of data breaches reported to it over the past 12 months, but also the inconsistency in responses and poor incident response turnaround times.

Upon reviewing the current incident response plan (IRP), it was discovered that while the business continuity plan (BCP) had been updated on time, the IRP, linked to the BCP, was last updated over three years ago.

What additional procedure and/or process would best reduce future incidents?