Use this skill when a company has no incident response plan, has one copied from a template that names teams it does not have, or an auditor, customer or insurer asks for it, and the team says "write our incident response plan", "IR plan", "security incident procedure", "who does what in an incident", "incident playbooks", "contact tree for incidents" or "our plan failed in the last incident".
Install
npx skills add better-isms/grcskills --skill incident-response-plan-draftingnpx skills add better-isms/grcskills --skill incident-response-plan-drafting -a claude-code -gnpx skills add better-isms/grcskills --skill incident-response-plan-drafting -a codex -ggemini skills install https://github.com/better-isms/grcskills.git --path skills/tristan-roth/incident-response-plan-draftinggh skill install better-isms/grcskills incident-response-plan-draftinggit clone --depth 1 https://github.com/better-isms/grcskills /tmp/better-isms__grcskills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/better-isms__grcskills/skills/tristan-roth/incident-response-plan-drafting ~/.claude/skills/incident-response-plan-drafting # Claude Code
cp -R /tmp/better-isms__grcskills/skills/tristan-roth/incident-response-plan-drafting ~/.agents/skills/incident-response-plan-drafting # Codex, Cursor, Gemini CLI, Copilot, OpenCode