The first moves should be about assembling and deploying a forensic investigative team and preserving the chain of evidence.