If a significant security incident occurs, what steps would you take to document and escalate the issue?