An employee in the finance department received an email with a spreadsheet attachment claiming to contain urgent budget corrections required by their manager. However, the spreadsheet is actually a file-based threat designed to compromise the user's system. What is the BEST action the employee should take to mitigate this threat?
Ignore the email and the attachment because it might be spam, and then delete it.
Report the email to the organization's security team for analysis before any further action is taken.
Forward the email to their manager to confirm its authenticity before opening the attachment.
Open the attachment to verify its content, then proceed with the tasks if it seems legitimate.