Office to establish policies and procedures; Administrator to appoint cybersecurity incident response teams; duties of cybersecurity incident response teams; private entity authorized to use cybersecurity incident response team.