IT manager and legal adviser reviewing incident response