A helpdesk technician receives a call from an employee whose company iPhone was stolen at a coffee shop 20 minutes ago. The device has a 6-digit PIN and Touch ID. What is the correct sequence of immediate response steps?

• A.A. Factory reset the device remotely, then report to IT, then file a police report
• B.B. Enable Lost Mode via Apple Business Manager/MDM immediately to lock the device and display a contact message, then report to IT security, then remotely wipe if the device contains highly sensitive data and recovery is unlikely
• C.C. Wait 24 hours to see if the device is recovered, then wipe it
• D.D. Change the employee's Apple ID password and revoke all trusted devices first, then report to IT