Processes -- Incident Response Policy -- Purpose and Scope of the Policy -- Definition