Cyber security legal support for incident response planning