Crafting an effective incident response plan for cyber threats