Many large organizations find themselves taken aback when evidence of a major breach or data theft is suddenly uncovered. It's always bad to look for help after your hair is on fire, so you need to plan ahead. Whether you have an internal IR team or not, here are the first ten things you need to do to scope, and begin to respond to a major incident.