Within 1 hour of discovery
A breech must be reported within one hour.
When must a breach be reported to the U.S. Computer Emergency Readiness Team?
When must a breach be reported to the U.S. Computer Emergency Readiness Team?
When must a breach be reported to the U.S. Computer Emergency Readiness Team?
When must a breach be reported to the U.S. Computer Emergency Readiness Team?
When must a breach be reported to the U.S. Computer Emergency Readiness Team?
Within 1 hour of discovery
Criminal Penalties, Civil Money Penalties, Sanctions
Within 24 hours of discovery.
Within 24 hours of discovery.
A breach must be reported to the U.S. Computer Emergency Readiness Team (US-CERT) when it involves a significant incident that impacts federal systems, networks, or data, or when it poses a potential threat to national security or public safety. Additionally, federal agencies and certain critical infrastructure sectors are required to report incidents that could compromise sensitive information or disrupt operations. Timely reporting is essential to facilitate coordinated responses and mitigate further risks.
A breach must be reported to the U.S. Computer Emergency Readiness Team (CERT) when it involves unauthorized access to sensitive information, such as personally identifiable information (PII) or protected health information (PHI), that affects federal systems or critical infrastructure. Federal agencies are required to report incidents within specific time frames, typically within 24 hours for significant breaches. Additionally, organizations that are part of the federal supply chain should report breaches that could impact government operations. Prompt reporting helps facilitate a coordinated response to mitigate risks and enhance cybersecurity.