incident response – outcomes