National Security Information Handbook

NSI Handbook
Policy and Program Management
2. The actual or possible loss or compromise of classified information presents a threat
to national security and must be reported to an immediate supervisor, NSI
Representative, or the NSI Program Team.
Loss: occurs when it cannot be physically accounted for or located
Compromise: occurs when classified information is disclosed to an unauthorized
person(s) who does not have a security clearance, is not authorized access, or does
not have a valid need-to-know
3. A successful security management system incorporates many facets of information
security including the possible occurrences of violations and infractions.
Security Violation: Any knowing, willful, or negligent action that:
­ Could reasonably be expected to result in unauthorized disclosure of classified
information
­ Classifies or continues the classification of information contrary to the
requirements of E.O. 13526, 32 C.F.R. 2001, or this handbook
­ Creates or continues a Special Access Program contrary to the requirements of
E.O. 13526
­ The ISOO Director shall be notified when a violation occurs when the
violation is reported to oversight committees in the Legislative branch; may
attract significant public attention; involves large amount of classified
information; or reveals a potential systemic weakness in classification,
safeguarding, or declassification policy or practices.
Security Infraction: Any unintentional action contrary to the requirements of E.O.
13526, 32 C.F.R. 2001, or this handbook
1-301 Incident Reporting Procedures
1. Any individual who has knowledge of a security incident shall:
Report the circumstances of the incident within 24 hours, in writing, to the
immediate supervisor, the assigned NSI Representative, or the NSI Program Team
Notify the successive supervisor within the office if the incident involves the
direct supervisor or NSI Representative
Notify the NSI Program Team and/or Director, SMD if the circumstances of the
incident make it impractical to notify the NSI Representative, supervisor, or next
successive supervisor thus ensuring proper security
Under no circumstances are individuals authorized to report security incidents to
Agencies/Departments outside EPA
2. The supervisor or NSI Representative shall:
Immediately notify the NSI Program Team
3. The NSI Program Team shall:
Assign an individual to conduct a Preliminary Inquiry (PI) to gather the facts
surrounding the security incident
­ Using the format provided in Appendix B, the assigned individual shall
forward the PI to the NSI Program Team within 72 hours
1-4