Incident Response Planning

 Incident Response Planning involves the creation of three sets of standard operating procedures (SOP); During the Incident, After the Incident and Before the Incident. As the CISO of a small manufacturing business what are the tasks you would assign to both the Users and Technology Services in the SOP for During the Incident? Who are the key personnel that need to be notified?