While you can take precautionary steps to try and avoid a cyber-attack, you can never fully eliminate the risk of one occurring. When it happens, you need to be prepared.
Having a general idea of how things should work in the event of an attack will help your team stay productive and efficient, while also managing the situation at hand.