Log the situation. Get a threat tier, a historical precedent playbook, and ready-to-send internal + external + social response copy.