When clear evidence of a hacker penetrating the isaca video

cism video for when clear evidence of a hacker penetrating the corporate network and modifying customer information is found, who should the information

Full Certification Question

When clear evidence of a hacker penetrating the corporate network and modifying customer information is found, who should the information security manager notify first?