As the CIO of a large multinational corporation, you are responsible for implementing and maintaining strong IT security practices throughout the organization. One of your employees has just reported that they have received a suspicious email from a seemingly legitimate vendor asking for sensitive financial information. You suspect that this email may be part of a phishing attack. Which of the following actions should you take FIRST in response to this situation?