Reporting suspected CBI violations
Responsibility of all CBI cleared persons
As with all CBI material, you are required to report to your supervisor or other appropriate authorities any known or suspected activities or conditions that might compromise the security of CBI information. Any suspected or actual CBI violations that you observe must be reported to appropriate officials (supervisor, DCO, etc.) within one business day (as required in the TSCA CBI Protection Manual).
Keep in mind that the standard for reporting violations is: does the person believe that it is possible that there was a violation? It is far better to report something that turns out not to be a problem than to miss a real problem.