An IT contract for a project states that all team members must be certified in IT security. The project manager discovers that one team member presented a fake certificate.

What should the project manager do first to handle this situation?

A) Update the project management plan to include resources to get the team member certified.
B) Update the issue log and remove the team member from the project.
C) Ensure the remaining team members have valid certificates.
D) Investigate why this situation was not discovered earlier.