Surge Corp has detected an attack on their network whereby personally identifiable information (PII) was leaked to an overseas organization. What is the next step in the incident management process?

Domain 7: Security Operations Practice Questions 
Questions relating to the following topics are included in this domain: 
Understanding and complying with investigations
Proper logging and monitoring activities
Performing configuration management 
Applying fundamental security concepts
Conducting resource protection and incident management