Who is responsible for reporting a data spill, the sender or the recipient?
Both the sender and the recipient are responsible for reporting a data spill promptly when the disclosure incident is discovered. Depending on sensitivity and classification, information about the spill is entered into the databases at the Intelligence Community (IC) Incident Response Center (IRC), the DOD Joint Task Force-Global Network Operations (JTF-GNO), and the U.S. CERT. These organizations then coordinate about the spill response and reporting. The organization’s data spill database permits identification of duplicate reports. Duplicate reports are highly preferable to failure to report a data spill.
Related Questions
- Who are the decision makers responsible for choosing the recipient of the University of San Francisco California Prize for Service and the Common Good?
- Who is responsible for retaining e-mail messages, the sender or the recipient?
- Who is responsible for reporting a data spill, the sender or the recipient?
