'It won't happen to me.' For many organisations, this is still the extent of their computer incident response plan.
