A financial company handling international transactions recently experienced a complex security incident. The incident involves simultaneous DDoS attacks, suspected internal data leakage, and the disc

A financial company handling international transactions recently experienced a complex security incident. The incident involves simultaneous DDoS attacks, suspected internal data leakage, and the discovery of sophisticated malware implants that have remained dormant until triggered remotely. During the incident it became clear that the current procedures are inadequate and plans to tackle issues were created on the go. To counter this problem going forward, the IR team is developing an incident playbook to be used if a similar incident reoccurs. Which set of elements of the playbook must be introduced?