Incident response policy
procedures addressing incident reporting
automated mechanisms supporting incident reporting
system design documentation
system configuration settings and associated documentation
incident response plan
system security plan
other relevant documents or records