A company's legal department is concerned that its incident response plan does not cover the countless ways security incidents can occur. They have asked a secu...