The documentation of a predetermined set of instructions or procedures to detect, respond to, and limit consequences of a malicious cyber attacks against an organization's information system(s). Respo

An Incident Response Plan (IRP) is specifically designed to address the detection, analysis, containment, eradication, recovery, and post-incident activities related to security incidents, including malicious cyberattacks. It provides a structured approach for an organization to manage and respond to security breaches and cyber threats effectively, thereby limiting their consequences.

A Contingency Plan generally addresses disruptions to IT systems or operations due to various events (e.g., power outage, equipment failure), which can include security incidents but is broader than just malicious cyberattacks.

An Operations Plan outlines routine day-to-day operational procedures, not specific responses to cyberattacks.

A Disaster Recovery Plan (DRP) focuses on recovering IT infrastructure and operations after a major disaster (natural or man-made) that causes significant downtime, often involving restoring systems from backups in an alternate location.