A city experiences a ransomware attack that encrypts its financial records. What is the FIRST step in the incident response process?
-
A
Pay the ransom to restore files quickly
-
B
Notify the public immediately via social media
-
C
Contain the affected systems to prevent further spread
-
D
Hire a forensic auditor