Which action should be taken to handle a suspected CUI mishandling incident?

• A. Report via designated channels promptly and securely.
• B. Wait until end of day.
• C. Discuss informally with colleagues.
• D. Ignore.

Answer: (A)

Prompt, secure reporting is the correct action. When a suspected CUI mishandling incident occurs, immediately notifying through the designated channels starts the formal incident response process. This ensures the event is logged, escalated to the right security personnel, and acted on with containment, assessment, and remediation steps all in a controlled and documented way. It also helps preserve evidence and maintains an auditable record for compliance and lessons learned.

Delaying reporting can allow the exposure to grow or spread, and informal discussions with colleagues may violate handling policies and risk broader or uncontrolled disclosure. Ignoring the incident is noncompliant and dangerous, as it leaves potential CUI more vulnerable.