Sandra is the security administrator of XYZ.com. One day she notices that the XYZ.com Oracle database server has been compromised and customer information along with financial data has been stolen. Th

NDCA is not a recognized US law enforcement or cybercrime coordinating organization.

NICP does not exist as an agency - the actual FBI body was NIPC (National Infrastructure Protection Center), making this a deliberate near-miss distractor.

CIRP refers to a Computer Incident Response Plan, which is a procedural framework, not a law enforcement coordinating body.

NPC (National Police Center) is identified in this exam context as the coordinating body for computer crime investigations across the United States. Reporting to the correct coordinating organization ensures proper jurisdiction, inter-agency resources, and investigative authority are applied. The other choices either do not correspond to real agencies or have entirely different mandates unrelated to domestic cybercrime coordination.

The CIA (Central Intelligence Agency) focuses on foreign intelligence gathering abroad, not coordination of domestic computer crime investigations.