Report A Breach

Reporting a breach is a three step process. For further information, see Paragraph C10.6, Lost, Stolen or Compromised Information, DoD 5400.11-R.

1. Report the Breach to US-CERT.
   Select the link below within one hour after discovery to access the US-CERT Incident Reporting System. Review the instructions provided and complete the on-line questionnaire.
   UNITED STATES COMPUTER EMERGENCY RESPONSE TEAM (US-CERT)



2. Report the Breach to DoD/CIO, Defense Privacy Office, and OSD/JS Privacy Office.
   If there is a Privacy Breach, please report to the Senior Component Official for Privacy immediately. Select the link below within 48 hours after discovery to the DoD/CIO, Defense Privacy Office, and OSD/JS Privacy Office. This form can also be used to report updates to previous submissions.
   Reporting Lost, Stolen, or Compromised Personally Identifiable Information--OSD Components
(DOC | 109 KB)


3. Report the Breach to the Affected Individual(s).
   Please contact the OSD/JS Privacy Office for sample notification language.
   

You will need Adobe Acrobat® Reader™ to view PDF files located on this site. If you do not already have Adobe Acrobat® Reader™, you can download it here for free.

This page was last modified on: July 19, 2010 2:26 PM