C10.1.2.4. Any incident in which deliberate compromise of
classified information or involvement of foreign intelligence agencies is
suspected as well as apparent violations of criminal law shall be reported
in accordance with DoD Instruction 5240.4 (reference
(ii)). The Principal Director, Information Warfare, Security, and
Counterintelligence (PD(IWSCI)); OASD(C3I), is the focal point for
investigative matters involving the actual or potential compromise of
classified information directed to the Department of Defense by other
Government Agencies or that may involve other Government Agencies.
C10.1.2.5. Local security officials will advise their parent
command security officials of compromises occurring within their security
cognizance and involving personnel assigned to that parent command.
C10.1.2.6. If the head of an activity or the activity security
manager to whom an incident is initially reported does not have security
cognizance over the incident, such official shall ensure that the incident
is reported to the appropriate authority. The organization with security
cognizance shall ensure that an inquiry/investigation is conducted
consistent with this Chapter and for taking corrective action as
C10.1.2.7. All compromises involving computer systems,
terminals, or equipment shall be reported through appropriate channels to
the Director, Information Assurance, Office of the Deputy Assistant
Secretary of Defense (Command, Control, and Communications) (DASD(C3)).
C10.1.2.8. Compromises involving foreign government
information shall be reported to the Director of International Security
Programs, OUSD(P), who shall notify the foreign government.
C10.1.2.9. Compromises involving DoD Special Access Programs,
or results of inquiries/investigations that indicate that weaknesses or
vulnerabilities in established SAP policy and/or procedures contributed to a
potential compromise, shall be reported to the Director, Special Programs,
C10.1.2.10. Results of inquiries/investigations into actual or
potential compromises that indicate that defects in the procedures and
requirements of this Regulation contributed to the incident shall be
reported to the PD(IWSCI),