A team has been asked to create an incident response plan for security incidents. In what phase of an incident response plan does the team get management approval of the plan?