Incident Response Plan (IRP)

Organization: Horizon

Maintained by: Security & Compliance Team

Last Reviewed: September 8, 2026

Version: 1.2

1. Purpose

The purpose of this Incident Response Plan is to provide a structured approach for detecting, responding to, managing, and recovering from security incidents that could impact Horizon’s systems, data, reputation, and compliance posture.

2. Scope

This plan applies to all:

• Information systems managed by Horizon
• Employees, contractors, and third parties with access to Horizon systems
• Data classified as confidential or higher (e.g., customer data, internal IP)

3. Objectives

• Minimize the impact of security incidents
• Ensure coordinated, consistent response efforts
• Protect customer and business data
• Meet regulatory and contractual obligations (e.g., Vanta, SOC 2, ISO 27001)