Watch this video on YouTube
What should be the initial action taken upon discovering that an employee is violating company policy by sharing corporate information with a third-party consultant using an external cloud storage service?