Develop a comprehensive security plan for a small business, considering the following aspects: $$ Identify the assets $$ Risk Assessment: Identify potential threats and vulnerabilities. $$ Security Controls: Propose at least three security controls $($technical and non technical$)$ to mitigate identified risks. $$ Incident Response: Outline a basic incident response plan for handling security incidents.