The operations team of an organization has reported an IS security attack. Which of the following should be the FIRST step for the security incident response te...