An incident response plan is the thing you least want to be writing at 2 a.m. while an attacker is already inside your systems. Yet that is roughly what happened to America's top cyber-defence body. According to TechCrunch, the Cybersecurity and Infrastructure Security Agency (CISA) admitted it "missed" a chance to get ahead of a security incident...