The statement "Security violations must be reported, but infractions do not" is true.

• A. True
• B. False
• C. Not applicable
• D. Not sure

Answer: (B)

In SCI security practice, any deviation from established security rules should be reported. The statement isn’t correct because infractions also must be reported. Both security violations and security infractions require reporting to the designated security authority (such as the Facility Security Officer, Special Security Officer, or other security official) through the proper incident-reporting process. This ensures timely assessment, possible investigation, and actions to prevent further risk to sensitive information. Even minor infractions are important to document so patterns can be identified and training or procedural changes can be implemented. Report specifics promptly, providing enough detail to support an accurate assessment, and preserve evidence as directed by your security program.