The costs associated with a cyberattack can be significant, especially if a company does not have an Incident Response plan that addresses risk.