When an employee notices a virus, he would implement the incident-response plan. It is a method to approach an attack in the system. Through this method, the organized plan would somehow restrain the security breach therefore the damages and recovery time will be significantly reduced.