You'll forget everything during a cybersecurity incident - so have a plan