Due the constant growth for the number of cyber attacks it is necessary to properly define the actions composing an incident response plan.