Remember kids: If you are doing incident response, the first step on every run book should be to ensure business continuity with Payroll. Everything else comes second.