Which of the following is a risk practitioner's BEST recommendation upon learning that an employee inadvertently disclosed sensitive data to a vendor? Invoke the incident response plan. Conduct an internal audit. Enroll the employee in additional security training. Instruct the vendor to delete the data