Employees should immediately report any suspected security incidents to their IT department or the designated security contact within the organisation.