Organizations can respond to a cyber attack by containing the incident, assessing the damage, communicating with stakeholders, eradicating the threat, recovering systems, and reviewing and improving security measures.