John, when cyber attackers hit your network and your databases have been breached, do you know what you have to do and who to call? What do you tell your customers, employees, and other stakeholders, and when do you tell them? Do you know who will contain the damage and take care of recovery? Do you know what compliance requirements come into play? When the clock is ticking is not the time to figure out those answers. There is a lot to do –and organizations that took the time to pull together a data breach response playbook will know all the things they need to do, and the order to perform those tasks.