Cyber incident response plans are like showers