If a CUI incident or breach occurs, what action is required?

• A. Report promptly to the CUI Program Manager or designated authority and follow the established incident response procedures.
• B. Ignore the incident unless it affects others.
• C. Notify only your supervisor and wait for further instructions.
• D. Document the incident in a personal notebook and continue work.

Answer: (A)

When a CUI incident or breach occurs, you must report promptly to the CUI Program Manager or designated authority and follow the established incident response procedures. This prompt escalation ensures the right people can quickly assess severity, contain the incident, preserve evidence, and coordinate notifications and remediation in a consistent, compliant way. Acting quickly reduces potential damage and keeps actions aligned with policy and legal requirements. Delaying reporting or handling it informally—such as notifying only a supervisor or jotting notes in a personal notebook—can bypass the official response, break the chain of custody, and prevent proper documentation and coordinated containment.