Division 2—Statutory incident response planning obligations