Which of the following should be the FIRST step when drafting an incident response plan for a new cyber-attack scenario?

A. Schedule response testing
B. Create a new incident response team
C. Create a reporting template
D. Identify relevant stakeholders