In Information Systems Audit and Control Association Certification practice, what is the FIRST step when a safety hazard is identified in the workplace?