You've noticed several unauthorized access attempts to your organization's Google Workspace resources. You suspect that some accounts might be compromised. Your corporate policy dictates that any security vulnerabilities must be addressed promptly. How should you investigate and remediate this security concern?