13 - Develop a comprehensive incident response plan and test it
Purpose:
People understand their responsibility clearly.
Best Practices:
Create a very simple plan first.
14 - Establish clear roles and protocols for reporting and escalating security incidents
Purpose:
Employees act fast during incidents.
Best Practices:
Conduct drills.