A guide with predefined tasks and phases for a particular incident response in Splunk Mission Control. After you add a response template to an incident, it becomes a response plan. Any changes you make to the response plan do not apply to the original response template and instead only apply to the investigation of that specific incident.
For more information
In Investigate and Respond to Threats in Splunk Mission Control: