Building a IR plan is an achievable task if you have the right framework. This session will provide you with a solid framework, techniques to build the right job aids and tasks for each role, and how to use security operations uses cases when building a plan.