Validate security response plans

[nimbinatus]

Document assignment of security response roles and how reports are handled.

Again, I think this is in the security docs