It's not possible to plan for every type of cyber threat. Your cyber incident response policy is merely a guide to help teams quickly and effectively respond to an attack and mitigate damage.