A well-communicated Incident Response Plan can greatly reduce the impact of a cyber attack in terms of cost, organisational downtime and reputation.