Can you draft an incident response plan template that specifically addresses a ransomware scenario for a small professional services firm with remote contractors?