A small retailer's point-of-sale register system was compromised, potentially leading to stolen customers' credit card information. What should the retailer do first to respond to this incident?
A) Set up a timeline
B) Incident declaration
C) Determine the scope
D) Respond to recommendations