Do you have documented Incident Response Plan in place?

Yes, we have a Incident Response policy and procedure that documents the process for reporting and handling an incident.