Incident Response Plans cover every scenario, except the one that you are about to face right now. You can handle the tech. How do you handle the human factors in being an incident responder and how do you actually do a response? These are the things that nobody teaches you in class. These are the things that can make or break an investigation.