What should be in a small business incident response plan?

Keep it practical: who to contact, how to contain affected accounts or devices, how to preserve evidence, how to communicate, when to involve vendors or authorities, and how to recover critical systems. Include current contact details and test the plan with a simple scenario.