A Security Manager Received an Email from an Anomaly Detection

Multiple Choice

A security manager received an email from an anomaly detection service, that one of their contractors has downloaded 50 documents from the company's confidential document management folder using a company-owned asset al039-ice-4ce687TL0500. A security manager reviewed the content of downloaded documents and noticed that the data affected is from different departments. What are the actions a security manager should take?

A) Measure confidentiality level of downloaded documents.
B) Report to the incident response team.
C) Escalate to contractor's manager.
D) Communicate with the contractor to identify the motives.