very good point about not letting your first practice be when you are being attacked. We work with a company that does both black and white box testing on our infrastructure so that employees can hopefully react to the attack and implement THE PLAN.