An employee clicked on a link in a phishing email, triggering a ransomware attack. Which of the following should be the information security manager's FIRST ste...