Scientific evidence shows that since the beginning of man, planning was considered important. Every organization has its own unique series of items in their incident response plan. But the following four examples are common to many organizations. HAVING a plan satisfies auditory compliance. Having access TO the plan requires planning.