What should an information security manager do FIRST when a service provider that stores the organization's confidential customer data experiences a breach in its data center?

A. Engage an audit of the provider's data center.
B. Recommend canceling the outsourcing contract.
C. Apply remediation actions to counteract the breach.
D. Determine the impact of the breach.