All enterprises should have a data breach incident response plan in place to help minimize the damage caused by a cyber-attack. ... The plan should include a list of processes that should be executed in the event of a breach and should also provide a clear guideline as to what actually constitutes a security incident.