Which step should be taken first when a server on a network is compromised?

Which step should be taken first when a server on a network is compromised?

A.
Refer to the company security policy.

B.
Email all server administrators.

C.
Determine which server has been compromised.

D.
Find the serial number of the server.