In a situation involving potential insider threat, who should be the first internal stakeholder notified before beginning active investigation?
-
A
The subject's direct supervisor
-
B
Legal counsel and designated security or HR leadership
-
C
The entire security operations team
-
D
The board of directors