Incident reponse plan set up
Setting up incident response plans
An incident response plan should be prepared whenever a potentially serious disruptive incident has been identified and where an unacceptable level of disruption and impact could result from such an event. This process of identifying potential incidents that require response plans to be prepared is done in Module 6 "Threats & incidents". Where a response plan is required, select the potential incident in the main list box in Module 6 and choose "YES" in the dropdown box. This potential incident will then appear in Module 9. The decision not to prepare an incident response plan to cover a particular potential incident would normally be approved by senior management following a formal risk assessment process and would also form part of the scope setting process.
Select the required incident response plan from the list box located at the top left hand side of the screen. The list box contains the full list of potential incidents where a "Yes" has been selected in Module 6 (see explanation above). The potential incident information that will appear will be threat type, potential incident name and probability rating. Selecting a specific phase or "All phases" in the lower left hand list box will also drive the selection of the tasks in the right hand list box.
Tasks are allocated to specific phases of the incident response processes. Once tasks have been setup for the selected incident, they can be displayed in the right hand list box by selected the required phase in the lower left hand list box or by selected "All phases". Tasks can be added, edited or deleted or the sequence of the tasks can be changed in the right hand list box. Task sequences are always maintained within the pre-set phases (e.g. A1; A2; A3; B1;B2; etc.).
Add a new task to the selected potential incident
Clicking the "+" button at the foot of the Task list box opens up a pop-up window that allows the User to add a new task or activity. In the pop-up window that then appears, enter the new task or activity name, assign a suitable phase code to the task using the Phase dropdown list box and click the "Save" button.
The list of tasks and activities for the selected plan and selected phase will be immediately updated. The User can amend the task details or the assigned phase code at any time using the "Edit" facility at the foot of the "Response & recovery tasks for selected incident response plan" list box.
Delete selected task
To delete a task or activity from the system, select that task or activity and click the delete button. The following pop-up will appear asking you to confirm this action: 
Great care should be exercised when deleting records as this action is permanent and not reversible. With the delete process, any related data may also be lost.
Edit the selected task
To edit a incident response plan task select that item in the list box and a pop-up will appear. 
Make the required changes to the selected item and click the "Save" button. If required the User may also edit the assigned phase and task duration data.
Set duration for the selected task
To set the duration for a specific task click the "Duration" button and the following pop-up will appear:
Choose a suitable time period for the selected task and enter a time value. Click "Save" to update the files or "Cancel" to close the pop up without updating the files. Duration values can also be entered or changed via the task "Edit" button.
Reference material: