An IR is necessary to get operations back to normal as quick as possible, and ensuring that systems are strengthened post-resolution. For regulatory, legal and even cyber insurance reasons, you might need to provide IR attestation with the incident details. It is also considered good business practice to provide your customers and business partners with visibility into the results of an IR process so that they know that you are serious and responsible in regards to securing their data.