Incident response plan reviews are growing in importance with the increasing numbers and types of information security incidents that enterprises must face. More than one-quarter of IR professionals are dissatisfied with their current organizations IR capabilities. Tabletop exercises can show an enterprise how it is not prepared, says BakerHostetler counsel M. Scott Koller. Tabletops exercises can help identify risks particular to the organization that published breach reports might not uncover, he says. Koller: IR plan should be flexible in its approach.”]