Upon discovering a possible improper inspection or disclosure of FTI or SSA data, including breaches and security incidents committed by a State employee or any other person, the individual making the observation or receiving information should immediately contact their supervisor*.

• The IRS requires that they be notified within 24 hours of discovery of an incident.

• The SSA requires that they be notified within 1 hour of discovery of an incident.

*If you are not comfortable reporting an incident to your supervisor, please report directly to the contacts on the next slide.