Best practise incident response standards have a well-established seven-step process they follow in the event of a cybersecurity problem: Prepare, Recognize, Stop, Eliminate, Restore, Learn, Test, and Repeat: It's important to prepare: The crucial phrase in an incident plan is 'preparation', not 'event'.