A risk practitioner discovers several key documents detailing the design of a product currently in development have been posted on the Internet. What should be the risk practitioner’s FIRST course of action?

A. Perform a root cause analysis
B. Conduct an immediate risk assessment
C. Invoke the established incident response plan
D. Inform internal audit