Approach includes 3 types of plans:
Incident Response Plan (IRP): define the actions to take while incident is in progress
Disaster Recovery Plan (DRP): most common mitigation procedure
Business Continuity Plan (BCP): encompasses continuation of business activities if
catastrophic event occurs