Which items should be considered before creating an incident response plan? Select ALL that apply.

### Why this is right - **Which information and systems are valuable to the organization** is correct because planning begins by determining what needs protection. - **Which incident types the organization might face** is correct because the plan needs to anticipate plausible incidents and appropriate responses. - **Who is qualified to be on the response team** is correct because response depends on people with suitable roles and skills. ### The concept Planning should reflect the organization's actual environment and needs. Valuable information and systems shape priorities, while likely incident types shape response procedures. The organization also needs to identify qualified responders and consider how it will inform employees about the plan, policies, and procedures. Communication and awareness are part of readiness, not optional extras to dismiss without consideration. ### The other options - **D. Whether communicating the plan to employees can be skipped**: This contradicts the need to consider how the organization will inform employees about the plan and related procedures. ### Terms - **Response team**: The people assigned to assess, document, and respond to incidents and support restoration and recovery. ### Remember Plan around the organization's assets, likely incidents, capable people, and communication needs.