Q14
Single choice
What should an IS auditor do FIRST upon discovering that a service provider did not notify its customers of a security breach?