C10.1.6.2. If the unauthorized access was by U.S. Government
civilian or military personnel or an employee of a cleared U.S. Government
contractor, without the appropriate security clearance, debriefing is
usually appropriate. The person should be advised of their responsibility to
prevent further dissemination of the information and of the administrative
sanctions and criminal penalties that might follow if they fail to do so.
The debriefing should be designed to ensure that the individual understands
what classified information is, why its protection is important, and knows
what to do should someone try to obtain the information. In the case of
non-DoD personnel and employees of U.S. Government contractors, the
appropriate security official in the individual's parent organization, to
include the appropriate Facility Security Officer, should be advised of the
C10.1.6.3. If the person involved is neither member of a U.S.
Government organization nor an employee of a cleared contractor, the
decision is much more situational. The key question to be decided is whether
the debriefing will have any likely positive effect on the person's ability
or willingness to protect the information.
C10.1.6.4. In any case where the person to be debriefed may be
the subject of criminal prosecution or disciplinary action, consult with
legal counsel before attempting to debrief the individual.
C10.1.6.5. It is sometimes useful to have the person being
debriefed sign a statement acknowledging the debriefing and his or her
understanding of its contents. The nature and format of the statement is
left to the discretion of the local security official so as to allow
flexibility in meeting the requirements of a particular incident. If the
person refuses to sign a debriefing statement when asked, this fact and his
or her stated reasons for refusing will be made a matter of record in the