If a business is under a DDoS attack, what immediate steps should they take?

Immediately activate your incident response plan. Contact your DDoS mitigation provider. Monitor network traffic to understand the attack's nature and scale. Communicate with your hosting provider and potentially law enforcement. Isolate affected systems if possible, and focus on restoring service as quickly as possible.