Which of the following is an information security manager's MOST important course of action after...

Assess the impact of the new threat on the organization in the event of materialization.

Update correlation rules for log monitoring to detect the possible emerging threat.

Report the threat to senior management immediately to enable an informed decision.

Review the enterprise architecture (EA) for vulnerabilities exploited by the threat.