This best practices document was drafted by the U.S. Department of Justice Cybersecurity Unit to help organizations prepare a response plan in the case of a cyber-incident. This document reflects lessons learned by federal prosecutors while they handled cyber investigations and prosecutions as well as input from private sector companies that have dealt with a cyber-incident.