After detecting an advanced persistent threat (APT), which of the following should be the information security manager’s FIRST step?

A. Notify management
B. Contain the threat
C. Remove the threat
D. Perform root-cause analysis