Requirement
"The organization shall plan and prepare for managing information security incidents by defining, establishing and communicating information security incident management processes, roles and responsibilities."[1]
Explanation
Create an incident response plan and an incident response team. Your incident response plan needs to cover incident response preparation. This includes training exercises. Your plan needs to outline how you plan to detect analyze contain and recover from incidents.
