After identifying a security breach that resulted in the loss of customer data but was contained before widespread system damage, which of the following is the most appropriate initial communication step?
Consult the incident response plan for specific communication protocols.
Immediately notify public relations to prepare a press release.
Directly contact law enforcement to handle the public notification.
Reach out to upper management before taking any actions.