An information security manager has been tasked with developing materials to update the board, regulatory agencies, and the media about a security incident. Which of the following should the information security manager do FIRST?

A. Invoke the organization's incident response plan.
B. Set up communication channels for the target audience.
C. Determine the needs and requirements of each audience.
D. Create a comprehensive singular communication.