How should security incidents involving SCI be reported?

• A. Report to HR
• B. Notify coworkers and supervisor
• C. Report immediately to the FSO/security office with details
• D. Email a supervisor at the end of the shift

Answer: (C)

When SCI security incidents occur, the immediate action is to report them to the Facility Security Officer (FSO) or the security office with full details. This formal channel ensures the incident is handled within the proper security framework, enabling rapid containment, accurate assessment of risk, preservation of evidence, and timely notification to the appropriate authorities as required by policy. Bypassing this through HR, telling coworkers, or delaying the report until the end of the shift can lead to exposure of sensitive information, uncoordinated responses, and gaps in the incident traceability.

In your report, include what happened, when and where it occurred, what information or materials were involved, who was present, whether any exposure or compromise occurred, and any steps already taken to mitigate the situation. The FSO will determine the next steps and coordinate any required notifications or investigations.