Three employees reported the theft or loss of their laptops while on business trips. The FIRST course of action for the security manager is to:

A.
assess the impact of the loss and determine mitigating steps.

B.
communicate the best practices in protecting laptops to all laptop users.

C.
instruct the erring employees to pay a penalty for the lost laptops.

D.
recommend that management report the incident to the police and file for insurance.

Explanation:
The first step when addressing theft or loss is to figure out what was actually lost and what needs to occur in response. Choice B may occur after the impact is assessed. Choices C and D depend upon company policy.