A cyber incident response plan is a document that presents a structured approach to outlining how an organisation may prepare for identify manage, and recover from potential cybersecurity threats. Such a document will set out who does what, describe how different groups and individuals will communicate, and lay out what steps should be followed to ensure the various functions of a response work together seamlessly. A cyber incident response plan can also include a list of various incident response phases like preparation, incident detection investigation reporting containment recovery, and lessons learned to be implemented after the incident. Organizations in the UK may so adopt such response plans to be able to set up a systematic means of dealing with cybersecurity threats like unlawful hacking ransomware theft or loss of data, or service denial. To ensure that the response to incidents is still a good match with the risks from cybersecurity, the technologies, and the requirements of each organization after their nature may have changed from time to time, it's a good practice for organizations to do regular reviews and exercises with the response plan they have adopted.