I'd like you to imagine the unthinkable-that your organization's been hacked. Please entertain that thought with me for a few minutes. Let's pretend that you've just been notified that the personal data of your organization's customers has been posted to an underground website where it's up for sale. In addition to fighting back a severe case of nausea, what do you do? You'd reach for the printed copy of your organization's incident response plan, right? What do you mean there is no such document? Are you telling me that you have never thought through this scenario and documented the steps to take in the case your organization experiences a breach?

Unfortunately, I believe the majority of the IBM i shops-large and small-are unprepared should their networks and/or systems be breached. I believe it's because most organizations think it will never happen to them. If that's your attitude, start reading the news. A new article about another company being breached appears almost daily. I'm guessing that the former (note, I said "former") CIO of Target never thought her organization wouldn't be breached either. Look how well that worked out for her.