An organization suspects a data breach. Which two actions should the incident response team take before notifying affected customers? (Choose two.)