Entities should prepare a response plan to enable the organisation to respond expeditiously to any eligible data breach.