An organization has detected sensitive data leakage caused by an employee of a third-party contractor. What is the BEST course of action to address this issue?

A. Include security requirements in outsourcing contracts.
B. Activate the organization’s incident response plan.
C. Limit access to the third-party contractor.
D. Terminate the agreement with the third-party contractor.