Most small businesses' incident response plans don't survive a real 2 a.m. crisis. Here's how to build a one-page IR plan your team will actually use — detection, contacts, containment, recovery.