In a situation involving potential insider threat, who should be the first internal stakeholder notified before beginning active investigation?

Remaining questions and full explanations are VIP-exclusive.