Cybersecurity in Action: Building an Incident Response Plan