Incident response playbook for cyberattack