incident-response policy

pay is firm