After identifying a security breach that resulted in the loss of customer data but was contained before widespread system damage, which of the following is the most appropriate initial communication step?
Directly contact law enforcement to handle the public notification.
Consult the incident response plan for specific communication protocols.
Reach out to upper management before taking any actions.
Immediately notify public relations to prepare a press release.