Ultimately senior executives are responsible for ensuring that a robust Incident Response plan is in place. The Incident Response plan should identify the chain of command for an incident. Many organizations will pre-select an outside incident response expert and include their contact information within the incident response plan in order to eliminate the step of vetting vendors while attempting to respond to an incident.