Developing Procedures Based on Policy to Respond to Incidents