you have been called in to collect information regarding a recent data breach at your organization. what specific information would you collect and for what reasons would you seek that information?