...an attack does occur. For more information about creating an incidence response plan, see the following: HackingExposed Windows 2000 by Joel Scambray and Stuart McClure (McGraw-Hill Professional Publishing, ISBN: 007292623). ...
http://technet.microsoft.com/library/cc700825.aspx