Listen to exam instructions

An exercise equipment marketing company is experiencing a data breach in which the company's website is displaying customers' payment information. The information disclosure is disastrous; customers are canceling their subscriptions in droves.

Unfortunately, the company has no SOAR or plans on what to do during a compromise.

What functional type of controls should the company implement to mitigate the damages?