A breach incident response plan can help reduce the cost of a breach by as much as $42 per record. A breach response plan should lay out procedures and processes for containing a breach, putting the forensics plan into action. A team of technology, legal, forensics and crisis communication experts should be formed in advance and review and practice the plan. A major security failure likely will change the way IT teams think about security after a breach. Good, based on lessons learned from the breach, should be maximized to make meaningful improvement in security.”]
Source: https://www.darkreading.com/analytics/how-to-cushion-the-impact-of-a-data-breach