How to choose?

Suzy works in the Security Operations Center (SOC). She discovered a data breach within her organization and has reported it to management. Which of the following actions should Suzy take next?

a. Contain the incident

b. Deploy a Disaster Recovery (DR) plan

c. Perform a root cause analysis

d. Gather evidence