Can you give me a step-by-step incident response plan template tailored for a ransomware attack because our servers were just hit and management is panicking?