No matter how well your network is protected, eventually there will be a incident that you are not prepared to handle by yourself. It could be because the problem is beyond your technical capabilities, or it could be because you have not been empowered to make the necessary decisions or to take the necessary actions. 

No company's security policy should be considered complete until procedures are put into place that allow for the handling and recovery from even the most devastating of the incidents. One possible solution is the inclusion of a Computer Incident Response Team (CIRT) within the company's incident response procedure.