What steps do you take to ensure that an incident response plan is effective across a distributed organization?