As a contract database engineer, you are hired to work on various projects, and recently you have become responsible for managing a healthcare organization's patient records. One day, while conducting routine security audits, you discover unauthorized access to the database containing sensitive medical records. It appears that a colleague from another department gained access without proper authorization.$$The ethical dilemma for you revolves around how to address this unauthorized access.$$What should your first steps be$?$