Which element is included in an incident response plan?

Organization mission is a foundational element of an incident response plan because the plan must reflect the organization's broader goals, strategies, and priorities. NIST SP 800-61 explicitly states that an IRP should include the mission, strategies, and goals of the organization along with senior management approval, giving the plan the authority and resources needed to function.

Incident response plans require senior management approval and sponsorship, not junior analyst approval, because executive authority is necessary for resource allocation and cross-departmental coordination.

Day-to-day firefighting describes a reactive, unstructured approach to security events, which is precisely what a formal incident response plan is designed to replace with defined procedures.

A siloed communications approach contradicts incident response best practices, which require coordinated, cross-functional communication among IT, legal, management, and other stakeholders.