What is$/$are the acceptable practice$/$s when it comes to reporting phishing email?

a$.$ Send the suspicious email to your manager, so that your manager will take this ahead

b$.$ Send the suspicious email to 'iCert@infosys.com' for further investigation

c$.$ Send the suspicious email to ISG by reporting it to 'infosecurity@infosys.com' for further investigation

d$.$ Send the suspicious email directly from your Outlook using 'Report Message' button to 'iCert@infosys.com' for further investigation

e$.$ Both $b$ and $d$