X-CUI-INCIDENT Informational
Report Loss or Compromise of CUI
Official citation: 32 CFR 2002; agency incident-reporting policy
Class: informational · Severity: high
Requirement text
32 CFR 2002; agency incident-reporting policy
What it means
Loss or compromise of CUI must be reported, often on tight timelines. 32 CFR Part 2002 and agency/contract incident-reporting policy (and DFARS 7012's 72-hour rule for DoD) govern when and to whom. Build the reporting path before an incident, not during one.
Required by
- — 32 CFR Part 2002
- — 32 CFR Part 2002
- — 32 CFR Part 2002
- — 32 CFR Part 2002
- — 32 CFR Part 2002
- — 32 CFR Part 2002
- — 32 CFR Part 2002
- — 32 CFR Part 2002
- — 32 CFR Part 2002
- — 32 CFR Part 2002
- — 32 CFR Part 2002
- — 32 CFR Part 2002
- IT/Cloud — 32 CFR Part 2002
- — 32 CFR Part 2002
- DIB — 32 CFR Part 2002
- Nuclear — 32 CFR Part 2002
- Legal — 32 CFR Part 2002
- Chemical — 32 CFR Part 2002
- Ag/Food — 32 CFR Part 2002
- Water — 32 CFR Part 2002
- GovCon — 32 CFR Part 2002
Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.