The challenges of incident response plans and procedures