Assume that you are the director of security services in a medium-size retail business. An incident of data theft from your company's servers has just been reported. You need to develop a strategy for the investigation of this incident. Describe the step-by-step process you would follow to ensure a detailed investigation of the incident.