What is a cybersecurity incident response plan? Contents A cybersecurity incident response plan (CSIRP) is a document that tells you and your staff what to do in case of a security incident such as a data breach, ransomware attack, service outage or loss of sensitive information.