In the Real World, Incident Response Is a Team Sport

The concept of incident response is not that complicated on paper, but in the real world it can get messy quickly. You don't want to claim you are following an international standard and then get discovered later that you weren't. The one thing i would caution you about your incident response plan is it is going to be able to call, be called as evidence in a class action lawsuit.