Sample Incident Response Policy Definition