“Creating an incident response plan is one thing, but using it effectively without a fire drill is a completely different enigma. How do you take your incident response plan, regardless of its maturity and make it effective? The answer – periodic role playing and practice, much like regular vulnerable assessments and penetration testing.”