Experts often emphasize the value of an appropriately structured incident response plan, and frequently raise questions about appropriate reporting structures within IT organizations. This session reviews the elements of incident response plans, and explores the debate about reporting relationships.