A model cyber incident response plan (IRP) addressing how organizations can prepare for and handle cyberattacks, data breaches, and other information security incidents. This Standard Document provides guidance for developing an IRP as applicable federal and state laws, regulations, and best practices may require for various organization types, including those mandated to maintain a written information security program (WISP). This Standard Document also includes integrated notes with important explanations and drafting tips and is designed to be used with Developing a Cyber Incident Response Plan Checklist.