Which of the following should be done FIRST when handling multiple confirmed incidents raised at the same time?

A. Activate the business continuity plan (BCP).
B. Update the business impact assessment.
C. Inform senior management.
D. Categorize incidents by the value of the affected asset.