Which of the following should an information security manager do FIRST when informed that customer data has been breached within a third-party vendor's environm...