Critical actions of an incident response team