Incident Response within an organization is a critical aspect to any cyber security program. Unfortunately, it is often an after thought. The result of ignoring this aspect will be the difference between a contained incident with little affect, and an entire network disconnect from the Internet for a prolonged period. In this talk, we will discuss the basic planning steps. These planning steps include network design issues that contribute to incident management issues as well as procedures for incident response. Steps to keep in mind during an incident. The pitfalls that many organizations hit during and after an intrusion. Post-incident analysis, the most over looked step in the process, will also be covered.