From ransomware and phishing scams to unauthorized access from within, nearly every organization will experience a cyber attack that could impact the security of its data, networks, and | or systems. Even with every preventative measure in place, governments and businesses are increasingly susceptible to cyber threats. That is why every organization must establish, test, and regularly update its incident response (IR) strategy. Ransomware, a form of malware that prevents businesses from accessing their computer files, systems, or networks and demands a ransom be paid for their return, is currently the most prevalent cyber threat. In the United States alone, there were 2,474 ransomware incidents in 2020, a 20-percent increase from 2019, and a 225-percent increase in ransom demands. 79 of those attacks were carried out against government organizations, costing $18.9 billion in downtime and recovery costs.