Incident response (IR) Strategic Decisions